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All rights reserved. No part of this publication may be re-produced, stored in a retrieval 
system, or transmitted in any form or by any means electronic, mechanical, photo copying, 
recording, or otherwise without the prior written permission of General Dynamics Itronix. No 
patent liability is assumed with respect to the use of the information contained herein. 


Some components of the Tadpole M1500 contain code licensed under the Linux Real Mode 
Interface (LRMI dated 1998), the GNU General Public License (GPL_Version 2 dated 
June1991) and is based in part on the work of the Independent JPEG Group and TIFF library, 
written by Sam Leffer. License details are appended to the end of this document. For any 
further assistance please contact your distributor or contact support@tadpole.com. 


Disclaimer of Warranty Notice 


General Dynamics Itronix Corporation makes no representations or warranties with respect 
to this manual, and shall not be liable for technical or editorial omissions made herein; nor 
incidental or consequential damages resulting from the furnishing, performance, or use of 
this manual. Further, General Dynamics Itronix Corporation reserves the right to make 
changes in the specifications of the product described within this manual at any time 
without notice and without obligation of General Dynamics Itronix Corporation to notify any 
person of such revision or changes. 


Environmental Statement 


General Dynamics Itronix Corporation support the concept of an environmentally 
responsible corporation. To this end we attempt to produce environmentally friendly 
products, minimize waste, and make use of recycled or used parts in our products to make 
the most use of used materials and components that pass our rigorous test and qualification 
procedures. All products containing such parts and components are supported fully by our 
manufacturers new product warranty. 


SC 
Declaration of FCC, UL & CE Conformity 


We, General Dynamics Itronix Corporation, 

2941 Fairview Park Drive, Suite 100, Falls Church, VA 22042-4513, USA, 
(509) 742-1598, declare under sole responsibility that the 

product Tadpole M1500 complies with 

applicable FCC, UL, and CE directives. 


es 

FCC Compliance Statement 
This equipment has been tested and found to comply with the limits for a Class B digital 
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable 


protection against harmful interference in a residential installation. This equipment 
generates, uses and can radiate radio frequency energy and, if not installed and used in 
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accordance with the instructions, may cause harmful interference to radio communications. 
However, there is no guarantee that interference will not occur in a particular installation. If 
this equipment does cause harmful interference to radio or television reception, which can 
be determined by turning the equipment off and on, the user is encouraged to try to correct 
the interference by one or more of the following measures: 


+  Reorient or relocate the receiving antenna. 


+ Increase the separation between the equipment and receiver. 


* Connect the equipment into an outlet on a circuit different from that to which the 
receiver is connected. 


+ Consult the dealer or an experienced radio/ TV technician for help. 


DOC Class B Notice 


This digital apparatus does not exceed Class B limits for radio noise emission for a digital 
apparatus as set out in the Radio Interference Regulations of the Canadian Department of 
Communications. 


Shielded Cables 


Connections between this system and peripherals must be made using shielded cables in 
order to maintain compliance with FCC radio frequency emission limits. 


The connection of unshielded equipment interface cable to this equipment will invalidate 
the FCC Certification of this device and may cause interference levels that exceed the limits 
established by the FCC for this equipment. It is the responsibility of the user to obtain and 
use a shielded equipment interface cable with this device. If this equipment has more than 
one interface connector, do not leave cables connected to unused interfaces. 


Changes or modifications not expressly approved by the manufacturer could void the user's 
authority to operate the equipment. 


Modifications 


Modifications to this device not approved by General Dynamics Itronix Corporation may 
void the authority granted to the user by the FCC to operate this equipment. 
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Safety Precautions 


> 


WARNING 


> 


WARNING 


> 


WARNING 


> 


WARNING 
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WARNING: Do not attempt to recharge alkaline or other non- 
rechargeable batteries with the Tadpole M1500 adapter/charger. 
Alkaline batteries cannot be recharged. Attempting to recharge 
alkaline batteries may cause personal injury and/or damage to the 
Tadpole M1500. 


WARNING: There is a risk of explosion if battery is replaced by an 
incorrect type. Dispose of used batteries according to the 
instructions. 


WARNING: To prevent fire, shock hazard, or damage to the 
equipment, do not expose the Tadpole M1500 to rain or 
moisture. Do not immerse the Tadpole M1500 in water. If water 
has entered the Tadpole M1500, do not use the Tadpole M1500 
until it has been inspected by General Dynamics Itronix 
Corporation. 


WARNING: All service and upgrades to the Tadpole M1500 must 
be performed by a authorized technician only. Otherwise, you 
may encounter personal injury and/or damage the computer. 
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Important Safety Instructions 


The following instructions pertain to the risk of fire, electric shock, or bodily injury. Please read all of 
these instructions carefully. 


1. Follow all of the instructions and warnings marked on the product or included in this 
manual. 


2. Do not place this product on an unstable or unsupported surface. 
The computer may fall, causing serious damage to the computer and others around. 


Slots and openings in the product are for ventilation. To ensure reliable operation of the 
Tadpole M1500, and to protect it from overheating, these openings must not be blocked 
or covered. Do not use this computer on a bed, sofa, rug or other similar surface. This 
product should never be placed near an oven, a radiator, or heat register. This product 
should not be placed in a built-in installation unless proper ventilation is provided. 


5. Never push objects of any kind into the Tadpole M1500 cabinet openings as they may 
touch dangerous voltage points or short out parts that could result in a fire or electrical 
shock. Keep liquids of any kind away from the computer. 


6. This product should only be connected to the AC power source indicated on the product 
system's information label. If you are not sure of the type of AC power available, consult 
your dealer or local power company. Only connect the Tadpole M1500 to a power outlet 
matching the power requirements of this product. 


7. Donot allow anything to rest on the power cord. Do not position this product where 
people can walk on the cord. If you have to use an extension cord with this product, 
make sure that the total amperage rating of all equipment plugged into it does not 
exceed the amperage rating of the extension cord. Make sure that the total of all 
equipment plugged into the main AC power outlet does not exceed 15 amps. 


8. This product is equipped with a 3-wire grounded type plug. 


Unplug the Tadpole M1500 from the main electrical power outlet before cleaning. Do 
not use liquid cleaners or aerosol cleaners. Use a damp cloth for cleaning. 


10. Keep liquids of any kind away from the product. 
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Introduction 


Welcome to the Tadpole M1500 User Guide. 


The Tadpole M1500 is a high-resolution, wireless-enabled ultra-thin client equivalent to that 
of the Sun Ray thin client manufactured by Sun Microsystems. 


The Tadpole M1500 also supports a virtual private network (VPN) which supports features to 
allow communication across the network that is secured through authentication and 
encryption. A list of these features is available in the section titled "Configuring VPN" on 
page 60. 
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The Sun Ray Computing Model Components 
The Tadpole M1500 


The Tadpole M1500 is a stateless device through which users can access data and 
applications that reside on a secure server. No data is stored on the Tadpole M1500. 


The Sun Ray Server 


With the release of the Sun Ray Server Software 3.0, Sun Ray Servers can be Solaris or Linux 
based. The Sun Ray Server manages user authentication and user sessions that are accessed 
via thin clients. User sessions, data, and applications reside on the server. Multiple servers 
can be configured for fail over, back ups, and load balancing. Sun Ray Server Software 4.0 
and above is recommended for the Tadpole M1500. However, all models are supported on 
version 3.1 of the Sun Ray Server Software. 


An Interconnection Fabric 


The interconnection fabric is comprised of the network components that connect the thin 
clients to the server. The Tadpole M1500 has a 10/100 Ethernet port as well as a built in 
wireless card for wireless connections. In addition, the Tadpole M1500 supports a number of 
mobile broadband devices via the USB ports (optional configuration, dependent on locality). 
Mobile broadband devices are not bundled in the standard configuration. For a list of the 
supported devices, see: 


ftp://ftp.tadpole.com/support/Tadpole_M1500/Manuals/3G_devices.pdf 
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User Instructions 


This section provides basic user instructions for operating the Tadpole M1500 Ultra-Thin 
Client Notebook. 
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Tadpole M1500 Components 


As you unpack the Tadpole M1500, check the shipping carton and the components inside it 
for damage. 


le 
b 


[pares 


Figure 1. Tadpole M1500 and Components 


If the Tadpole M1500 components are missing or damaged, please contact your shipper or 
dealer immediately. 


Each shipping carton contains the following items: 


* Tadpole M1500 Ultra-Thin Client Notebook 
«+ ACadapter and power cord 

- Rechargeable battery (not pictured) 

+ This User Guide (not pictured) 
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Tadpole M1500 Features 


This section identifies the hardware components of the Tadpole M1500. 


Figure 2. Front Panel 


Table 1. Front Panel Components 


1 Indicator LEDs 


Microphone/audio-in 


2 
3 Headphones/audio-out 
4 


Cover latch 
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Figure 3. Back Panel 


Table 2. Back Panel Components 


1 


Battery 


Figure 4. Left Panel 


Table 3. Left Panel Components 


1 


Kensington lock 


HDMI port 


VGA connection 


Ethernet port 


ExpressCard slot 


2 
3 
4 
5 
6 


SD card slot 
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Figure 5. Right Panel 


Table 4. Right Panel Components 


1 


USB port (x1) 


USB ports (x2) 


Smart card slot 


2 
3 
4 


AC connector 


Using the AC Adapter 
To power the Tadpole M1500 from an AC adapter: 


Plugging in the AC Adapter 


1 
2 
3. 
4 


Place the Tadpole M1500 near an AC outlet. 

Plug the AC adapter into the AC connector of the Tadpole M1500. 
Plug the AC cable plug into the AC adaptor. 

Plug the AC cable plug into a nearby AC outlet. 


Unplugging the AC Adapter 


1. 
2. 


Unplug the AC cable from the AC outlet. 
Disconnect the AC adapter from the Tadpole M1500. 
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Using the Battery 


afi “=o = 


Figure 6. Notebook, 9-cell Battery, and Adapter 
e\ NOTE: A 6-cell battery is also available for the Tadpole M1500 system. 
Installing the Battery 


1. Slide the battery into the battery bay. See Figure 7. 


Figure 7. Sliding Battery into Battery Bay 


2. Press gently but firmly until the latch locks it into place. 
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3. Move the battery lock switch (marked with a “1”) towards the battery to lock into 
position. 


Charging the Battery 


The battery must be charged before the first use. A completely discharged battery takes 2 
to 4 hours to charge (depending on whether the Tadpole M1500 is on or off). 


1. Connect the AC power adapter to the notebook and then to the electrical outlet. Allow 
the battery to fully charge. The Battery status LED blinks blue when charging and 
displays solid blue when fully charged. (See Table 5.) 


2. Once a battery pack is fully charged for the first time, use the Tadpole M1500 on battery 
power until the battery discharges completely. This extends battery life and helps ensure 
accurate monitoring of battery capacity. 


outlet. You can leave the battery in the Tadpole M1500 as long as you like since its internal 
circuitry prevents it from overcharging 


NOTE: The battery does not charge if it or the Tadpole M1500 is too hot, either from use or being ina hot 
environment. If this occurs, the battery status LED blinks amber. Disconnect the Tadpole M1500 
from any electrical outlet and allow it to cool to room temperature before attempting to charge 
the battery. 


e\ NOTE: The battery automatically charges whenever the Tadpole M1500 is connected to an electrical 


Checking Battery Status 


Table 5. Battery Status LED 

Battery Status Indicator LED 

Charging Blinks blue 

Fully Charged Solid blue 

Discharging Off 

Critical Low Blinks amber; approximately 10-15 minutes left 
(depending on operating environment) 


Battery Performance 
The performance of the battery can vary, depending on operating conditions. The battery 
may last less time if you are using PC Cards, USB devices or have high display-brightness 
settings. 

Removing a Battery 


To remove the battery from the Tadpole M1500, follow these steps: 


Shut down the Tadpole M1500 according to the instructions on page 23. 
Disconnect the AC power cord if necessary. 


Turn the notebook over to disconnect the battery from the battery bay. 


RwN 


. Move the battery lock switch to the right (unlock position). 


Tadpole M1500 User Guide Page 9 


5. Slide and hold the battery release latch. 


6. Remove the battery. 
Maximizing Battery Life 


A battery can be recharged many times, but over time it loses its ability to hold a charge. To 
maximize battery life: 


+ — If storing the Tadpole M1500 for an extended period of time, remove the battery. Do 
not store a fully charged battery: charge it to 25-50% of its capacity, then store. Fully 
charge the battery before using the Tadpole M1500 again. 


- If you have a spare battery pack, alternate the batteries. 
+ — Ensure that the Tadpole M1500 is off when replacing the battery. 


+ Store spare battery packs in a cool, dry place, and out of direct sunlight. 


CSCS 
Powering Up 
This section discusses the steps for powering up the system. 


1. Verify that either battery power or AC power is available to the system. 


Open the display cover by moving the latch to the right and lifting. 


The power button for the Tadpole M1500 is located above and to the left of the 
keyboard. Press the power button to turn on the system. See Figure 8. 


Power Button 
Figure 8. Power Button 


4. View the initial system screens. After approximately 6 seconds the monitor momentarily 
displays a light blue screen with a Loading... message, indicating that the Tadpole 
M1500 is running initial startup processes. After 12 seconds a menu displays on screen, 
indicating that the Tadpole M1500 is trying to connect to a Sun Ray server via DHCP. See 
Figure 9. 
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[ GENERAL DYNAMICS 


fh} Show options 


Figure 9. Initial Menu 


e\ NOTE: By default the Tadpole M1500 connects via a wired Ethernet connection to a Sun Ray server 
running DHCP. 


5. The Tadpole M1500 is now ready to be configured for connection to the network. (Also 
see "Network Access Setup" on page 44.) 


Accessing a Network Profile 


Upon completion of the Tadpole M1500 initialization and the display of the initial menu, 
perform the following steps to access a network profile: 


1. Click Show options on the initial menu to display the following options tabs: Network 
Profiles, Video Settings, Hardware Settings, and Status. See Figure 10. 


GENERAL DYNAMICS 


DHCP 


Hide options 


Network Profiles| Video Settings |Hardware Settings |Status| 100% | 


Office WiFi 


Figure 10. Options Tabs: Network Profiles 


2. Click the Network Profiles tab to display the available network profiles. 


3. Double-click a profile in the Network Profiles tab to connect to the network. These 
network profiles have been pre-configured by the network administrator. 


e\ NOTE: If the Tadpole M1500 detects an Ethernet cable, it defaults to use the wired Ethernet connection. 
Remove the cable to connect via wireless or a mobile broadband device. 
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Video Settings 


Click the Video Settings tab in the options menu to access the video settings. See Figure 11. 


GENERAL DYNAMICS 


DHCP 
D 


Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings| Status| 100%) 


r Video 
Screen Resolution , VGA1 | {_NotPresent + | 

o Output [Mirror Largest + | 
Screen Rotation VGAl ov None ¥ ] 

S S @ Yes @ No 


Monitor ¥ 


Video Blanking Timeout? @ Leave on 


@ Turn off after CJ minutes 


Close Apply 


Figure 11. Video Settings Tab 
Screen Resolution 


The Tadpole M1500 default behavior is to use the resolution of the built-in display. Use the 
Screen Resolution menu to set the resolution of an externally connected display monitor. 
See Figure 12. Select the port (VGA 1 or DVI-D 1) that the monitor is connected to and enter 
the monitor screen resolution. The procedure is discussed below. 


GENERAL DYNAMICS 


DHCP 
D 


Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings |status| 100% |) 


dutput 


Video Blanking Timeout? @ Leave on 


@ Turn off after B minutes 


Close Apply 


Figure 12. Screen Resolution Menu 
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1. Select the port from the Screen Resolution menu to which the external display device is 
connected. See Figure 12. 


+ Select VGA 1 for analog monitors connected to the VGA port. 


- Select DVI-D 1 for the built-in display and for digital monitors connected to the 
HDMI port. 


2. The Tadpole M1500 automatically uses the largest resolution for the display monitor. To 
temporarily change the resolution at which the Tadpole M1500 drives the display enter 
values into the text field to the right of the Screen Resolution menu. Resolution and 
frequency values are in the format Width (px) x Height (px) @ Refresh Rate (Hz), e.g., 
1920x1200@60. See “Display Devices and Session Size” below for more information on 
setting the resolution and changing the default session size. 


e\ NOTE: Spaces between values are not allowed. 


3. Click Apply to apply the screen resolution changes. The resolution changes and you are 
asked to confirm the change in a pop-up window. If you do not confirm, the setting 
reverts back to the original after 15 seconds. If you confirm, the setting remains in 
operation until you power cycle the machine. 


Display Devices and Session Size 


When a display device is connected to the Tadpole M1500, the default behavior is to set the 
default session size to match the resolution of the largest connected display. This should be 
adequate for most uses. For example, connecting an external 1920x1200 LCD screen results 
in a default session size of 1920x1200. Attaching a projector with a resolution of 1024x768 to 
this setup results in a default session size of 1920x1200 (the resolution of the connected 
display). See "Example: Connecting an LCD Projector for Use with the Tadpole M1500" on 

page 18 for more information on connecting projectors. 


If this behavior is not desired, it is generally best to set the default policy on the Sun Ray 
server. This can be client specific (via MAC address) or token specific (via smart card). Please 
refer to the Sun Ray user guide and utresadm and utresdef commands in particular. 


As an alternative, the Tadpole M1500 Video Settings menus can be used to set the default 
policy for the unit. However, this only affects new sessions, and the policy set on the Sun Ray 
server takes precedence. If a session is active, it needs to be terminated and a new session 
initiated in order for any changes in these menus to become active. 
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Video Output 


Select the appropriate video output from the Video Output menu in the Video Settings 
tab. Figure 13 shows the video output modes available for the Tadpole M1500. Click Apply to 
apply the video output changes. 


GENERAL DYNAMICS 


DHCP 


Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings Status | 100% |) 


Video 


Screen Resolution VGA1 +] {_NotPresent ¥ | 


Output 


nee 
LYDS 1 

DVI-D 1 

Mirror Smallest 

Mirror Largest 

Video Blanking Timeout? QualHead Moda] 


© Turn off after C) minutes 


Close | Apply 


Figure 13. Video Output Menu 


e\ NOTE: 


e\ NOTE: 


The Tadpole M1500 operates in a fail-safe mode. Should video output be directed where no 
display device is connected, the system attempts to fall back to the built-in display. When a 
display device is plugged into a Tadpole M1500, the system attempts to dynamically direct video 
output to the connected display device. 


Select VGA 1 for analog monitors connected to the VGA port. 
Select LVDS 1 for the built-in display. 
Select DVI-D 1 for digital monitors connected to the HDMI port. 


Mirror Smallest/Largest: The monitors are mirrored. When set on Mirror Largest, if 
the monitors are different sizes, the smaller matches the resolution of the larger. The 
Sun Ray server does not recognize separate resolutions for two monitors operating 
in a mirrored mode, since commands to change resolutions (such as utset and 
utsettings) affect both monitors identically. 


DualHead Mode: When an external monitor is connected, it and the built-in display 
are treated as one large screen. The Sun Ray Server is aware there are two display 
devices and controls them separately in a mode compatible with a Sun Ray 2 with 
dual heads. Sun Ray server commands (such as /opt/SUNWut/bin/utset) can 
be used to control the resolution of each individual display device. 


Dynamically attaching a monitor when configured for DualHead Mode mirrors the monitors until 
the Tadpole M1500 is restarted. Press [Menu-A] to restart, at which point the Sun Ray Server 
detects the monitor configuration and treats each monitor as a separate entity. This is a 
restriction of the Sun Ray Server software. 
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Screen Rotation 


To adjust the screen rotation, select the appropriate port and the desired rotation from the 
Screen Rotation menus in the Video Settings tab. See Figure 14 and Figure 15. 

* Select VGA 1 for analog monitors connected to the VGA port. 

+ Select LVDS 1 for the built-in display. 

+ Select DVI-D 1 for digital monitors connected to the HDMI port. 

- None: No screen rotation. 

- Right: Rotate Clockwise. 

- Left: Rotate counter-clockwise. 


* Over: Rotate over (upside down). 


GENERAL DYNAMICS 


DHCP 
D 


Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings | Status 100%. |i) 


[ VGA1 +] [ NotPresent + | 


Mirror Largest ¥ 


CJ minutes 


Figure 14. Screen Rotation Port Menu 
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GENERAL DYNAMICS 


DHCP 
D 


Hide options 


Network Profiles | ¥ideo Settings | Hardware Settings |Status| 100% |) 


Video 
Screen Resolution [ VGA1 + | [ Not Present ¥ 
Rotation veai_>) amen) 
< 1S ‘5 None 
S s @ Yes @ No Right 


Video Blanking Timeout? @ Leave on Ores 


@ Turn off after 


Close | Apply 


Figure 15. Screen Rotation Direction Menu 
Swap Screens 


If you are using DualHead Mode in Video Output Settings and you need to swap the 
screens, click the Yes radio button to the right of the Swap Screens setting in the Video 
Settings tab. See Figure 11. 


Desktop Size 


The Tadpole M1500 has three sets of dimensions (width x height) relating to screens and 
video: 


- The Physical Size is the size in pixels of the highest resolution supported by the 
monitor, and used to set maximum buffer sizes. The Sun Ray server takes this to be 
the default resolution, also known as the “Monitor” resolution. When an external 
monitor is connected, the physical size is set to the smallest monitor when 
configured to Mirror Smallest, and largest when configured to Mirror Largest. 


+ The Logical Size is the size in pixels of the X windows desktop size. A newly created 
X session has a logical size the same as the physical size. When moving a Sun Ray 
session between two different units, the logical size can become greater or smaller 
than the physical size. When this happens, the Sun Ray server is responsible for 
adjusting the resolution of the logical size to the physical size. 


+ The Desktop Size forces the physical size to the dimensions chosen, and this 
becomes the default (or “Monitor”) resolution for the Tadpole M1500. When the 
Desktop Size is larger than any monitors attached, the Tadpole M1500 pans around 
the screen as the mouse reaches any of the monitor's extremities. 


To set the desktop size, select the desired size from the Desktop Size dropdown list in the 
Video Settings tab. See Figure 16 and Figure 17. Click Apply to apply the desktop size changes. 
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( GENERAL DYNAMICS 


Screen Resolution 
Video Output 
Screen Rotation 
Swap Screens 
Desktop Size 


Video Blanking Ti it? 
ideo Blanking Timeout? Eeneno 


1024x768 
1280x800 
1280x1024 
1600x900 


Screen Resolution 
Video Output 
Screen Rotation 


Swap Screens @ No 


Desktop Size Coe Moniion =] 
: (4) 


Video Blanking Timeout? 1280x800 


1280x1024 { } minutes 
1600x900 


1600x1200 
1920x1200 


Figure 17. Desktop Size Menu (2 of 2) 
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Video Blanking 


Use the 
saving) 


Video Blanking Timeout? setting to override the video blanking (video power 
options from the host. This setting places the video output into power saving mode 


after the specified time-out regardless of the screen saver settings. 


To change the video blanking timeout: 


1. 


3. 


To the right of the Video Blanking Timeout? option in the Video Settings tab, click the 
Turn off after radio button. See Figure 11. 


In the text field to the right of the Turn off after radio button option, enter the number 
of minutes (e.g., 90 for 90 minutes) for the power saving mode time-out. A value of 0 
(zero) means that the video never enters power saving mode. 


Click Apply to apply the video blanking timeout changes. 


Example: Connecting an LCD Projector for Use with the Tadpole M1500 


1. 


e\ NOTE: 


Connect the LCD projector to the appropriate port of the Tadpole M1500 and power up 
the projector. 


Power on the Tadpole M1500. 


By default the Tadpole M1500 mirrors the resolution of the largest display device 
connected. If another higher resolution device is connected, go to Step 3 to modify this 
behavior. 


In the Video Settings tab, select Mirror Smallest from the Video Output menu and 
click Apply to apply the video output changes. 


Depending on the configuration of the Sun Ray server session, you may need to restart 
the session. At the login prompt, press and hold down [Ctrl-Alt] and then tap 
[Backspace] twice in quick succession. You may need to repeat the key sequence several 
times to kill the session and initiate a re-start. 


The key sequence kills the active session. Any data not saved is lost. 


The screen momentarily goes black before restarting the session and providing a 
login screen at the correct resolution. If the resolution is incorrect, go to Step 4. 


In the text field to the right of the Screen Resolution menu in the Video Settings tab, 
enter the desired resolution at which the LCD projector operates (e.g., 1024x768 @60). 
Click Apply to apply the screen resolution changes. 


Depending on the configuration of the Sun Ray server session, you may need to restart 
the session. At the login prompt, press and hold down [Ctrl-Alt] and then tap 
[Backspace] twice in quick succession. You may need to continue to hold down [Ctrl- 
Alt] and tap [Backspace] twice in quick succession several times to kill the session and 
initiate a re-start. 


The key sequence kills the active session. Any data not saved is lost. 


The screen momentarily goes black before restarting the session and providing a 
login screen at the correct resolution. 
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Hardware Settings 


Click the Hardware Settings tab in the options menu to access the hardware settings. See 
Figure 18. 
+ Keyboard Type: Select from the list of available keyboard types. See Figure 19. 
e\ NOTE: Sun keyboard types are automatically detected. 


+ Mouse Acceleration: This controls the amount of mouse or touchpad movement 
required to move the cursor across the screen. See Figure 18. Clicking the checkbox 
enables the local mouse acceleration to override the Sun Ray server acceleration. The 
slide bar determines the acceleration/deceleration of the mouse as the finger moves 
across the touchpad. 


+ Disable Mouse While Typing?: Select Yes or No as desired. 
: Disable Touchpad With Mouse: Select Yes or No as desired. 
- Allow Single/Two/Three Finger Tap: Select Yes or No as desired. 


- Shut Down After Lid Closure: Select options as desired. If selecting the Plugged in/ 
Unplugged after option, in the text field to the right of the option, enter the 
number of minutes before shutdown. 


- Power Button: Select options as desired. 


GENERAL DYNAMICS 


DHCP 
a 


Hide options 


[Network Profiles | video Settings | Hardware Settings | Status 


Hardware 
0 leration @ ————) 
se While Typing? @ Yes @No 
sad With Mouse @ Yes @No 
Allow Single Finger Tap 
Allow Two Finger Tap 
Allow Three Finger Tap 


Shut Down After Lid Closure @ Immediately 
@ Never 
@ Plugged in after (__J minutes 
@ Unplugged after (Z_ minutes 


Power Button @ Always enabled 
@ Enabled on mains only 
@ Enabled on battery 
@ Disabled 


Close | Apply | 


Figure 18. Hardware Settings Tab 
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GENERAL DYNAMICS 


DHCP 
D 


Hide options 


[Network Profiles| Video Settings | Hardware Settings | Status 


Hardware 
Keyboard Type 
leration English US 
While Typing? Englich UK 
Disable Touchpad With Mouse English UK (Sun) 
Japanese 


Allow Single Finger Tap Japanese (Sun) ea) 
Ye: No 


Allow Two Finger Tap 
Allow Three Finger Tap Yes No 


Shut Down After Lid Closure @ Immediately 
@ Never 
@ Plugged in after (__Jminutes 
@ Unplugged after (Z_ minutes 


@ Always enabled 

@ Enabled on mains only 
@ Enabled on battery 

@ Disabled 


Figure 19. Keyboard Type Menu 


Status 


The Status tab is shown in Figure 20. This tab is for display only. The information cannot be 
changed in this tab. 


Identification 

Displays information specific to the unit. 
Network 

Displays network connection information. 
Extended Status 

Displays the following four buttons: 


+ Ethernet: This is the default. It shows the network connection information. The 
actual connection can be LAN, WiFi, or 3G broadband. See Figure 21. 

+ Radio: This displays the WiFi/3G SSID and signal strength/quality. See Figure 22. 

* VPN: This displays the Virtual Private Network connection information. See Figure 23. 


+ Power: This displays the battery usage information. 
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GENERAL DYNAMICS 
Be 


~ Hide options 


Identification 


Unit MAC Address 00262227F48C 
Firmware Tadpole-mb03-V4.0,6-0102 


Network 

SunRay Client Address 192,168.128.93 
SunRay Server 192,.168.128.1 
Firmware Server 192,168,128.1 
VPN Peer 


Device Address 


Figure 20. Status Tab 


( GENERAL DYNAMICS 


~~ Hide options 


Unit MAC Address 00262227F48C 
Firmwar ethernet Status 


Natwatee Duplex Full 


Bit Rate 100 Mbps 


SunRay 


VPN Peer 


Device Address 


Figure 21. Ethernet Status 
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{ GENERAL DYNAMICS 


Conf. Room WiFi 


~ Hide options 


Unit MAC 
Firmwar 


Access Point OOOFBS384801 
Protocol IEEE 802.11abg 
Bit Rate 11 Mbps 
SunRay Signal Quality 22% 
Signal (dBm) -88 
Noise (dBm) Unknown 
Firmwar | Frequency Unknown 


VPN Pee 


SunRay 


Extended Status 


Figure 22. WiFi Status 


{ GENERAL DYNAMICS 


Source 11,8,29,162(4500) 
Destination 219.152.119.87(4500) 
Mode tunnel 

Eneryption aes-128 
Authentication hmac-shal 

Lifetime (sec) 28681 


SPI 0x650820c 

Source 219,152.119,.87(4500) 
Destination 11.8.29.162(4500) 
Mode tunnel 

Encryption aes-128 
Authentication hmac-shal 

Lifetime (sec) 28681 


Figure 23. VPN Status 
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Shutting Down 
There are two ways to shut down the Tadpole M1500: 


- Press the power button located above the keyboard; or 


+ Close the display lid. The Tadpole M1500 is configured by default to power down 
one minute after the lid is closed. 


Restarting 


Restart a Tadpole M1500 that has been halted and powered down with the following steps: 


1. Press [Menu -A] to perform a soft-reset of the client firmware. The system power resets 
and then restarts. 


2. Power up the system. 


Integrated Keyboard 


The Tadpole M1500 features an integrated keyboard which includes a numeric keypad and a 
full array of special function keys. See Figure 24. 


Figure 24. Integrated Keyboard 


This section covers the Tadpole M1500 integrated keyboard and identifies several keys that 
are commonly used when working with the operating system. 
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Special Keys 


+ [Esc]: Press the [Esc] key to cancel any changes you are making and to exit a 
software screen or OSD menu. 


+ [Enter]: Press the [Enter] key to position the blinking cursor at the beginning of the 
next line on the display screen. 


- [Prt Sc/Sys Raq]: Press the [Prt Sc/Sys Rq] key to print whatever is on the screen at 
the time. Note that in some software programs, this key may be used in conjunction 
with other keys for other specific functions. Consult the software user manual for 
more information. 


+ [Num Lock]: Press the [Num Lock] key to enable/disable the numeric keys on the 
right hand side of the keyboard. 


+ [Caps Lock]: Press the [Caps Lock] key to type letters in upper case. The number 
keys and function keys are not affected. 


- [Shift]: Press the [Shift] key in conjunction with a letter key to type the letter in 
upper case. Note that in some software programs, this key may be used in 
conjunction with other keys for other specific functions. 


Modifier Keys 
The following modifier keys only function when used in conjunction with other keys. 


- [Fn]: Press the [Fn] key to engage the alternate function (labeled in blue) on selected 
keys. For example, simultaneously pressing the [Fn] + [Dn Arrow] keys decreases the 
speaker volume. 


+ — [Ctrl]: The [Ctrl] key is used in conjunction with other keys in the software program 
to perform specific functions. Refer to the software user's manual for details on how 
the [Ctrl] key functions. 


+ [Menu]: The [Menu] key is located between the [Alt] key and the [Ctrl] key on the 
right side of the space bar. Use it as a shortcut to access specific menus. See 
"Accessing the Tadpole M1500 Menu System" on page 32. 


- [Alt]: The [Alt] key is used by the software program to perform specific functions. 
Refer to the software user's guide for more details on how to use the [Alt] key. 


Cursor Control and Editing Keys 


The keys listed in this section are specifically used to move the cursor on the display. When 
used in combination with other keys, these cursor control keys provide some editing 
functions. Refer to the specific software manual for details on how to use these keys. 


- Left/Right Arrow Keys: Press either of these keys to move the cursor one character 
at a time in the direction shown on the arrow key. 


- Up/Down Arrow Keys: Press either of these keys to move the cursor one line at a 
time in the direction shown on the arrow key. 
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+ — [PgUp] or [PgDn]: When used with the [Fn] key, the [PgUp] and [PgDn] keys allows 
the cursor to move page by page, or window by window, depending on the 
software. 


+ [Home]: The [Home] keys moves the cursor to the beginning of a document or the 
beginning of a line, depending on the software. 


+ [End]: The [End] key moves the cursor to the end of a line or to the end of a 
document, depending on the software application. 


- [Insert]: The [Insert] key enables the user to insert characters within the text while 
interacting with the OS. In some applications, [Insert] is a toggle key, alternating 
between character insert and character overtype. 


+ [Delete]: The [Delete] key is used to edit text at either the operating system 
command prompt or the text within a document. Press the [Delete] key to remove 
any characters to the right of the cursor and then pull the remaining typed 
characters from the right. 


+ [BackSpace]: While within a document, the [BackSpace] key moves the cursor to 
the left and simultaneously erases characters in its path. 


Common Keyboard Combinations 


The function keys [F4], [F5], [F6], [F7], and [F8] at the top of the keyboard perform various 
operations with respect to the operating system and software in use. The following table lists 
these special functions. 


Key Combinations Definitions 


Decrease display brightness 


Increase display brightness 


Mute audio volume 


Decrease audio volume 


Increase audio volume 


e\ NOTE: Function keys [F1], [F2], [F3], [F9], [F101], [F11], and [F12] are not mapped on the Tadpole M1500 
to perform special functions. 
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Notebook Buttons 


The Tadpole M1500 contains additional buttons located above the keyboard. Table 6 lists 
and describes the function of each. 


Figure 25. Notebook Buttons 


Table 6. Notebook Buttons 

Button Function 

1. Power Press to turn the system on or off. 

2. USB Press to charge the devices connected to the left 
hand USB ports. 

2. Sound Press to mute volume. Indicator LED is non- 
functional. 
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The Touchpad 


The Tadpole M1500 touchpad is a touch-sensitive pointing device located below the 
keyboard. See Figure 26. 


Figure 26. Touchpad 


The touchpad buttons have essentially the same function as mouse buttons. Clicking these 
buttons makes selections, drags objects, or performs a variety of other functions depending 
on the software. 


eS 
Status Indicator LEDs 


The Tadpole M1500 has two sets of status indicating LED lights. These LEDs are located 
above and below the keyboard, as shown in Figure 27. 


Figure 27. Status Indicator LEDs 
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The indicator LEDs located above the keyboard display status related to the keyboard 
functions. See Figure 28 and Table 7. 


1 


2 


Figure 28. Keyboard LEDs 


Table 7. Keyboard LEDs 


LED 


Function 


1. Number Lock 


Indicates that number lock is on when lit 


2. Caps Lock 


Indicates that caps lock is on when lit 


The indicator LEDs on the bottom left corner of the notebook display power and battery 
status. See Figure 29 and Table 8. 


Figure 29. Notebook LEDs 


Table 8. Notebook LEDs 


LED 


Function 


1. Power 


Indicates that power from the main source or from the 
battery is being supplied to the notebook when lit 


2. Battery Indicates battery state as fully charged (blue), charging 
(blinking blue), discharging (off), or low (blinking amber). 
See also Table 5. 
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SC 
Using Smart Cards 


The Tadpole M1500 uses smart cards for user identification and authentication. 


Inserting a Smart Card 
Insert a smart card using the following steps: 


1. Locate the smart card slot on the right side of the Tadpole M1500 as shown in Figure 30. 


2. Carefully slide the card chip side first into the slot. Orientation of the chip up or down 
does not matter. 


3. If you encounter too much resistance, do not force the card. Check the card orientation 
and try again. 


Figure 30. Inserting a Smart Card 
Removing a Smart Card 
Refer to Figure 31 and the following instructions for removing a smart card: 


1. Grasp the exposed edge of the smart card. 


2. Pull out as shown to remove. 
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Figure 31. Removing a Smart Card 
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System Administrator 


~ 
=. 
i. 


This section provides instruction for configuring and connecting the Tadpole M1500 Ultra- 
Thin Client Notebook to the network using an Ethernet connection, wireless connection, or 
mobile broadband connection. 
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Accessing the Tadpole M1500 Menu System 


os 


Perform the following steps to access the Tadpole M1500 menu system. 


NOTE: The cursor must be located inside the On Screen Display (OSD) window to enable any of the menu 
items to be selected. It is also possible to move the OSD window by dragging the window to a 
new position. 


1. Turnon the Tadpole M1500. 
Press [Menu-M]. 


The main menu comes up in the OSD as shown below. To navigate the main menu use 
the [up/down/left/right arrow] to highlight the appropriate menu. When highlighted, 
press [Enter] to select. 


Main Menu == 
= 


Figure 32. Main Menu 


In addition to the main menu items shown above, use the [Menu] key to access the 
following menus: 


[Menu-A] Soft reset of the Tadpole M1500 firmware. The system power cycles and restarts. 
[Menu-B] Mini browser 

[Menu-L] Displays license information 

[Menu-P] Lists configured profiles and enables selection for use 

[Menu-M] Main Menu 


[Esc] Exits the previous menu 
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Network Profiles 


A profile is necessary to access the network server. Each profile can be configured to attach 
to both a wired network and a wireless or mobile broadband network. As a default, the 
Tadpole M1500 connects to the Ethernet configured profile; if the Ethernet cable is not 
present, it connects via the wireless or mobile broadband network. 


The Network Profiles menu is accessible through the Main Menu. See Figure 33 and 
Figure 34. 


Hetwork Profiles > 


Figure 33. Network Profiles Menu (1 of 2) 


Hetwork Profiles > 


Figure 34. Network Profiles Menu (2 of 2) 
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Creating a New Profile 


1. Inthe Network Profiles menu, select New Profile and press [Enter]. 


Hetwork Profiles > 


Figure 35. Network Profiles Menu 


2. Enter anew Network Profile name. This can contain up to 32 characters. 


Hew ProFile 


oFFice wireless 


Figure 36. New Profile Screen 


3. Press [Enter] to save the new profile. 
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Editing a Profile 


1. To configure the new profile or modify an existing one, select Edit Profile from the 
Network Profiles menu, then select the profile name. 


Edit Profile > 


Figure 37. Edit Profile Menu 
2. Configure the network profile in accordance with your network setup. 


See sections regarding configuring the Tadpole M1500 for connection over Ethernet (page 
44), wireless (page 49), and mobile broadband (page 56). 


Defining a Startup Profile 


To define the profile the unit uses each time it is started, select Startup Profiles from the 
Network Profiles menu and select the network profile required. 


It possible to configure this startup or “default” profile as follows: 


1. For the profile to always start up when the unit is reset or turned on, select No at the 
Profile Menu at Startup menu. See Figure 38. 


Go to Step 6. 
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ProFile Menu at 
startup 


Figure 38. Profile Menu at Startup Menu (1 of 3) 


2. Tobe prompted to confirm the selection of a default profile each time the Tadpole 
M1500 is started, select Yes at the Profile Menu at Startup menu. See Figure 39. 


Profile Menu at 
startup 


Figure 39. Profile Menu at Startup Menu (2 of 3) 


The “default” profile highlighted in the OSD is used upon restart. The user must press 
the [Enter] key to allow the profile to initialize. 


Go to Step 6. 


3. The With Timeout option allows the user to delay the profile startup for up to 30 
seconds before the profile is automatically started. During this delay an alternate profile 
can be selected. See Figure 40. 
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DHCF 


Prompt For profile at 
startup? 
Yes 
Ho 


Figure 40. Profile Menu at Startup Menu (3 of 3) 


4. Enter the number of seconds (1-30) for the delay. 


DHCP 


Profile menu timeout (sI: 


Figure 41. Profile Menu Timeout (1 of 2) 


5. Press [Enter] to confirm the configuration. 


<4 


ProFile menu will be 

displayed For 205 on 

re-start with ‘office 
Wireless as the default. 


Figure 42. Profile Menu Timeout (2 of 2) 


DHCP 
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Asummary of the options for the default profile configuration is listed in Table 9. 


Table 9. Summary of Options for Default Profile Configuration 


No Always uses the “default” profile. No timeout. 


Yes Infinite timeout. Requires user to agree to the highlighted 
“default” profile selection. Enter key must be pressed. 


With Timeout | Sets the “default” profile with a 0-30 second delay. 


e NOTE: Only one profile can be configured as the “default” profile. The last profile modified using the 
startup profile menu becomes the “default” profile. 


6. For changes to take effect, the Tadpole M1500 must be re-initialized. Press [Menu-A] to 
reset/reboot the firmware. 


Copying a Profile 


1. Select Copy a Profile from the Network Profiles menu. Select the profile you wish to 
copy and then enter a new name. 


Copy ‘home wireless (>> 


WPH to oFFice To 


2G JPA to of Fice 


Figure 43. Copy Profile Screen 


2. Press [Enter] to save the newly created profile. 
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Deleting a Profile 


Select Delete Profile from the Network Profiles menu. Select the profile you wish to delete 
and then press [Enter]. 


Delete Profile 


Figure 44. Delete Profile Screen 


e\ NOTE: The active profile, which is displayed at the top left corner of the OSD window, cannot be deleted. 


Securing a Profile 


Each profile can be locked against upload or download or both by assigning a security 
password to the profile. By default the profile is unlocked. 


The purpose of this feature is to secure any given profile from being uploaded onto another 
Sun Ray firmware server and an existing profile being downloaded onto another Tadpole 
M1500 system. To upload or download the profile, the security password must be known. 


In some instances users require access to a profile to add their own configuration for a given 
profile, such as a home wireless configuration. The VPN configuration maybe pre-defined by 
the administrator to protect sensitive information (such as the pre-shared key being shared 
with the user—once the pre-shared key is entered it's no longer displayed in plain text) 
while still allowing the profile to be edited by the user. If the profile is locked for both upload 
and download, the amended profile can not be uploaded to the firmware server nor can the 
default profile be downloaded to the Tadpole M1500 when the system connects to the 
server, ensuring that the user's home wireless configuration remains in place. 


Profile Management 


It is possible upon the creation of a single or complete set of multiple “profiles” on a Tadpole 
M1500 to upload the “master” profile configuration to a firmware server in order to 
propagate the configuration to all Tadpole M1500s of the same model or a defined number 
of Tadpole M1500s by using the MAC address of the unit or use of the Tadpole M1500 .parms 
file. (See "parms File" on page 81.) Note that it is not possible to deploy a complete set of 
configuration profiles and a single profile file to the same Tadpole M1500. Also, once the 
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“profile” has been uploaded, it also needs to be downloaded individually by name to another 
Tadpole M1500. In addition, the profile can be secured to prevent further uploads or 
downloads, preventing transfer of the profile(s) to another firmware server or new profile(s) 
being deployed on the Tadpole M1500. 


Profile Upload/Download Overview 


The Network Profiles menu contains options for uploading and downloading already 
configured profiles from the server. See Figure 45. 


Hetwork Profiles & 


Figure 45. Network Profile Menu 


When a system starts up it attempts to contact a firmware server (which may be configured 
either directly or in the menu system, provided via DHCP properties from a server or 
provided from an entry in the parms file from a server). The system checks to see whether 
there is a more recent version of the firmware available and attempts to locate a 
configuration file via TFTP from the firmware server, first from <model>.<macaddr>.cfg 
and then if that fails from <model>.cfg. 


The file downloaded can either contain a full configuration set for the Tadpole M1500 or an 
individual profile. The configuration in the downloaded file is merged with the current 
configuration. Any changes in the downloaded file override those in the running firmware. If 
the new configuration results in any changes to the active profile, the Tadpole M1500 
automatically re-starts. 


Upload a Single Profile to the Server 


If the profile has been secured for upload with a password, the following steps are required 
to allow the profile to be uploaded to the firmware server. To upload a single profile to the 
server, complete the following steps: 


1. First create the configuration file name on your firmware server and ensure that it has 
correct permissions. For example, 


# cd /tftpboot 
# touch Campusi.cfg 
# chmod 666 Campus1.cfg 
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2. Select the Network Profiles menu. Page down to the second page and select Upload to 
Server and press enter. 


Upload Profile 


Figure 46. Upload Profile Menu 


3. Highlight a profile type from the list to export and press [Enter]. See Figure 47. 


Export profile 


Campus l.cFg 


Figure 47. Export Profile Example 


4. (Optional) To populate the configuration automatically to any new system which is 
subsequently attached and accesses the firmware server, rename the Campus1.cfg 
within the /tf tpboot directory to Tadpole -mb03.cfg: 


# mv Campusi.cfg Tadpole-mb03.cfg 


5. Press [Enter]; a confirmation message window should appear. See Figure 48. Select OK. 
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Export profile - 


Figure 48. Export Profile Confirmation 


e\ NOTE: It is advisable to change the permissions to read only on this file to stop any further changes 
once all the systems have been configured. To ensure no further systems are configured with the 
profile configuration, move or rename the file. The Download Profile/Profiles menu allows you to 
import the configuration to each system individually. 


Upload All Profiles to the Server 

This option uploads the entire configuration set to the server. 

To upload the entire profile configuration set to the server, scroll down to Upload All to 
Server from the Network Profiles menu and press [Enter]. The system prompts for a 


filename to save the configuration (defaulting to <model>.<macaddr>. cfg) via tftp to 
the firmware server. 


Export profiles 


ole-mbO02.001BSS4C656 1.cfg 


Figure 49. Export All Profiles 


The system administrator must create this file name or an alternative file name on the 
firmware server, ensuring that the file name is writable prior to attempting to upload it. 
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character at a time or press [Ctrl-U] and the entry is removed ready for a new 


e\ NOTE: To remove the default entry <mode1>.<macaddr>. cfg press [Backspace] to delete one 
<filename>.cfg to be inserted. 


If the Tadpole M1500 has a system password set, it is necessary to enter this password to 
allow the upload to complete. Should any single profile have a password securing the 
upload, this is also required prior to the system password request to allow the upload to 
complete. 


Renaming the file created on the firmware server to Tadpole<model>.cfg allows the 
profile to be propagated to any Tadpole M1500 of the same model provided the profile is not 
secured against download. 


Download a Profile 


1. To import a configuration to the Tadpole M1500. Select Download from Server from 
the Network Profiles menu and press [Enter]. See Figure 50. 


Hetwork Profiles > 


Figure 50. Download from Server 


2. Erase the default file name and enter the configuration file name present on the 
firmware server. See Figure 51. 


Import profiles 


campus leckg 


Figure 51. Import Profile Configuration Name 
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3. After entering the configuration name, a “Profile successfully imported” message 
window appears; select OK. 


e NOTE: Renaming the file created on the firmware server to Tadpole<model>. cfg allows the 
profile to be propagated to any new Tadpole M1500 of the same model which is subsequently 
attached to the network, provided the profile(s) are not secured against download. 


It is possible to target a configuration file to a particular Tadpole M1500 by either explicitly 
creating Tadpole<model>.<macaddr>.cfg or by creating a 
Tadpole<model>.<macaddr>. parms file in which a series of single profiles required 
for this device are listed, provided the . parms file is not secured against download. (See 
“parms File" on page 81 for details of use.) The Tadpole M1500 restarts if necessary. 


If the profile has a security password set to protect unauthorized download, it is necessary to 
enter the password in order to download the profile. The profile must be downloaded using 
the Download From Server from the Network Profiles menu as detailed above. The user is 
prompted to enter the security password of any profile which has been assigned a security 
password before the profile(s) are imported to the Tadpole M1500. 


e\ NOTE: It is not possible to download both a complete set of profiles and single profiles to a single 
Tadpole M1500. 


An individual profile either replaces the profile with the same name or adds it into the first 
blank profile slot. If it does not match, or if no slots are free, it is ignored. 


Network Access Setup 


This section describes how to set up the Tadpole M1500 to access the network via Ethernet, 
wireless, and broadband. 
Configuring and Connecting Using Ethernet 
Default Ethernet Configuration DHCP 
The Tadpole M1500 default configuration profile is to connect via DHCP to a Sun Ray server, 


provided the Ethernet cable is connected. Depending on your Sun Ray server configuration, 
no further configuration is necessary. 


It is possible to reconfigure the first profile (DHCP) or to create your own profile for any given 


network configuration. The name of the current active profile is displayed in the top left 
hand corner of the OSD. 
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Hetworking 


Figure 52. Connected to DHCP Network 


Ethernet: Configuring and Connecting a Static IP 


1. After selecting the Networking option from the Main Menu, select Ethernet from the 
Select Interface screen and press [Enter]. 


Hetworking 


Figure 53. Networking Menu 


2. Select None from the Ethernet Setup menu. 
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Ethernet Setup 


Figure 54. Ethernet Setup Menu 


3. Under Setup TCP/IP select Static. 


setup TCP“IF 


Figure 55. Setup TCP/IP Screen 


4. Enter prompted information into the table: 


Static IP Parameters Comments 
Enter IP Address 


Enter Netmask 


Enter Router (default router IP address) 


Enter Broadcast 


Enter MTU (optional, press enter for default) 


5. After entering the appropriate TCP/IP information for your location, select Yes or No as 
appropriate in the Save Changes screen. If you selected Yes, you are given a 
confirmation screen stating, “Changes saved.” Return to the Networking menu by 
selecting No Save Changes screen and OK at the Changes Saved screen. 


6. Exit to the Main Menu via Back to Main or by pressing [Esc]. 
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7. If your Sun Ray server configuration does not require you to enter a server or firmware 
server address, nor a Domain Name Service for the operation, re-initialize the Tadpole 
M1500 for the changes you have made to take effect. Press [Menu-A] to reset and reboot 
the firmware. 


8. Once negotiation between the client and server is complete, you are connected to the 
server. You are now be presented with either a login screen, a request to insert your 
smart card, or some other server-dependent startup screen. 


Ethernet 802.1X 
The Tadpole M1500 supports the following 802.1X extensible authentication protocols (EAP): 


* —PEAP/MSCHAPv2 
« —PEAP/GTC 
- TLS 


802.1X requires an authentication server, such as a radius server, along with an Ethernet 
switch able to be configured to provide certification to enable access. Configure the radius 
server and download any certificates required to comply with the appropriate protocols. 
Should the authentication method use certificates, ensure that the certificates have been 
downloaded prior to configuring Ethernet 802.1X (see "Certificate Management" on 

page 56). 


e\ NOTE: MTU (Maximum Transmission Unit). The default setting is 1500 bytes, which is the maximum 
value. If you are using a VPN other than that included on the Tadpole M1500, you might want to 
decrease this value to allow space for IPSec headers. (1366 bytes, for example). 


Configuring a Server 


1. After selecting the Servers option at the main menu, you are prompted for your server 
IP address or name. You can enter up to 10 server addresses. 


Setup servers = 
= 


Figure 56. Setup Servers Screen (1 of 2) 


2. Next you are prompted for a firmware server address. Enter the address if required, or 
else press [Enter] and leave it blank. 
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Setup Servers ES 
| 


Figure 57. Setup Servers Screen (2 of 2) 


3. Atthe Save Changes menu, highlight Yes and press [Enter]. Press [Enter] at the prompt 
and OK to confirm configuration saved. 


4. For the changes you have made to take effect, you must re-initialize the Tadpole M1500. 
Press [Menu-A] to reset/reboot the firmware. 


5. Once negotiation between the client and server is complete, you are connected to the 
server. You may now be presented with either a login screen, a request to enter your 
smart card, or some other server-dependent startup screen. 


Configuring a Domain Name Service 


1. Select the Networking option at the main menu. Then select Domain Name Service. 


Hetworking 


Figure 58. Networking Menu 


2. Enter your DNS Server domain name. 
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OHMS Serwers == 
—— 


Figure 59. DNS Servers Screen (1 of 2) 


3. Next you are prompted for the IP address of the DNS server. 


DHS Servers ES 
| 


Figure 60. DNS Servers Screen (2 of 2) 


4. Atthe Save Changes menu, highlight Yes and press [Enter]. Press [Enter] again at the 
prompt and OK to confirm changes saved. 


5. For the changes you have made to take effect, you must re-initialize the Tadpole M1500. 
Press [Menu-A] to reset/reboot the firmware. 


6. Once negotiation between the client and server is complete, you are connected to the 
server. You may now be presented with either a login screen, a request to enter your 
smart card, or some other server-dependent startup screen. 

Configuring and Connecting Using Wireless 


The Tadpole M1500 has a built-in wireless card to connect to an 802.11x wireless access point 
or wireless router that is configured for your Sun Ray network. 


At the OSD, select Networking and then select Wireless from the Networking menu. 
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Hetworking 


Figure 61. Networking Menu 


The system can now either scan for local wireless networks or you can configure the 
wireless manually. 


Manual Wireless Configuration 


Continue with these steps to configure the wireless manually: 


1. Select Configure Manually and press [Enter]. 


Wireless Setup 


Figure 62. Wireless Setup Screen 


2. At the Enter SSID (network name) prompt, enter the SSID of your wireless network and 
press [Enter]. 


3. Atthe next screen displaying the wireless security mode option, select the appropriate 
network configuration. The Tadpole M1500 supports the following WLAN security 
modes: WEP, WEP/802.1X, WPA-PSK, WPA-PSK2, WPA-EAP, and WAP2-EAP. 
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Wireless Setup 


Figure 63. WLAN Security Modes 


Select the security mode appropriate to your router and configure accordingly. 
e\ NOTE: If you use Certificates for authentication, these should be first added. 


4. Next, select the appropriate option to configure the wireless for a DHCP or for a Static IP 
address. 


setup TCOP“IF 


Figure 64. IP Configuration Screen 


5. Enter prompted information into the table: 


Static IP Parameters Comments 
Enter IP Address 


Enter Netmask 


Enter Router (default router IP address) 


Enter Broadcast 


Enter MTU (optional, press enter for default) 


6. After entering the appropriate TCP/IP information for your location, select Yes or No as 
appropriate in the Save Changes screen. If you selected Yes, you are given a 
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confirmation screen stating, “Changes saved.” Return to the Networking menu by 
selecting No Save Changes screen and OK at the Changes Saved screen. 


Exit to the Main Menu via Back to Main or by pressing [Esc]. 


8. If your Sun Ray server configuration does not require you to enter a server or firmware 
server address, nor a Domain Name Service for the operation, re-initialize the Tadpole 
M1500 for the changes you have made to take effect. Press [Menu-A] to reset and reboot 
the firmware. 


9. Once negotiation between the client and server is complete, you are connected to the 
server. You may now be presented with either a login screen, a request to insert your 
smart card, or some other server-dependent startup screen. 

e\ NOTE: The quality and reliability of the wireless router/access point plays a major role in the wireless 
performance of the Tadpole M1500. Older off-the-shelf wireless routers tend to perform less 


reliably when running graphics-intensive programs via wireless. If you have questions regarding 
wireless routers, consult your Tadpole M1500 representative. 


To allow further configuration of a wireless device, select Advanced from the main menu, 
then select Wireless Tunables. See Table 10 below. 


Table 10. Wireless Tunables 


Wireless Description Specifications 
Tunable 

Fragmentation | Used to adjust the size above Range: 256-2346 
Threshold which packets sent over the Default: 2346 


wireless network are broken up. 
Reducing the threshold can 
improve performance on noisy 
networks but in general degrades 
performance by increasing 


overhead. 
RTS/CTS Used to adjust the RTS/CTS Range: 0-2346 
Threshold threshold. This is the minimum Default: 2346 


packet size for which the wireless 
driver performs an RTS/CTS 
handshake prior to packet 
transmission (minimum). This 
increases overhead upon 
transmission but can improve 
performance on networks with a 
large number of active nodes. 


Default Used to select the default transmit | N/A 
Transmit Key | key slot for WEP encryption. May 
be necessary for some wireless 
routers. 


e\ NOTE: Alteration of these options is generally not required for correct operation. They may be used to 
tune behavior in certain wireless network environments. Be aware that incorrectly setting some 
of these may degrade performance for particular configurations. 
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Scan for Networks 
As an alternative to configuring the wireless manually, you can scan for networks. 


1. Select Scan for networks and press [Enter]. You are presented with a list of available 
networks. 


Wireless Setup 


Figure 65. Wireless Setup Screen 


Similarly, the Configure during connect option allows for the locally available wire- 
less access points to be scanned during the profile initialization phase. The user 
selects from the list the wireless device for connection, then enters the WLAN secu- 
rity mode and supplies the appropriate authentication for the selected mode. 


Wireless Setup 


Figure 66. Configure during Connect 


Using this option, the user can configure the wireless device for operation when the 
profile is secured by a system password, which denies access to the majority of the 
menu system (see "System Password" on page 80 for further details). 


2. Select the desired network and press [Enter]. 
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Wireless Setup 


Figure 67. List of Networks 


3. Select the WLAN security mode required and press [Enter]. 


Wireless Setup 


Figure 68. Wireless Setup Security Modes 


4. Enter the appropriate authentication for the selected mode. 


5. Next, select the appropriate option to configure the wireless for a DHCP or for a Static IP 
address. 
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setup TCP-IP 


Figure 69. IP Configuration Screen 


6. 


If you select Static IP addresses for your Tadpole M1500, you are prompted for the 
following information: 


Static IP Parameters Comments 
Enter IP Address 


Enter Netmask 


Enter Router (default router IP address) 


Enter Broadcast 


Enter MTU (optional, press enter for default) 


After entering the appropriate TCP/IP information for your location, select Yes or No as 
appropriate in the Save Changes screen. If you selected Yes, you are given a 
confirmation screen stating, “Changes saved.” Return to the Networking menu by 
selecting No Save Changes screen and OK at the Changes Saved screen. 


Exit to the Main Menu via Back to Main or by pressing [Esc]. 


If your Sun Ray server configuration does not require you to enter a server or firmware 
server address, nor a Domain Name Service for the operation, re-initialize the Tadpole 
M1500 for the changes you have made to take effect. Press [Menu-A] to reset and reboot 
the firmware. 


Once negotiation between the client and server is complete, you are connected to the 
server. You may now be presented with either a login screen, a request to insert your 
smart card, or some other server-dependent startup screen. 


The quality and reliability of the wireless router/access point plays a major role in the wireless 
performance of the Tadpole M1500. Older off-the-shelf wireless routers tend to perform less 
reliably when running graphics-intensive programs via wireless. If you have questions regarding 
wireless routers, consult your Tadpole M1500 representative. 


Tadpole M1500 User Guide Page 55 


Disable Wireless 


Select Disable Wireless and press [Enter] to disable the wireless device within the firmware. 


Wireless Setup 


Figure 70. Disable Wireless 
Certificate Management 


The Tadpole M1500 currently supports the use of Certificate Authority Root certificates in 
order to verify the authenticity of a radius server used during WPA Enterprise and 802.1X 
(EAP) authentication. 


A number of certificates files in PEM format can be stored on the local flash of the Tadpole 
M1500. To transfer a certificate file to the Tadpole M1500, it must be placed on a web (HTTP or 
HTTPS) server and then downloaded to the Tadpole M1500 using the Security -> Certificate 
Management -> Add CA Root Certificate option. This prompts first for the URL to load the 
certificate PEM file from and then the filename to store it locally to. 


Certificates can also be removed from the local store by use of the Remove CA root 
certificate option in the Certificate menu. 


Once a certificate is loaded on to the Tadpole M1500 it can be selected for verification of a 
radius server in the wireless and Ethernet 802.1X configuration menus. If no CA root 
certificate is selected when configuring the wireless or 802.1X devices, then the authenticity 
of the server is not verified. 


Connecting and Configuring Using Mobile Broadband 


e\ NOTE: Refer to Table 20, “Supported 3G Devices,” on page 91 for a list of compatible broadband devices. 


1. Power off the unit and insert the mobile broadband device. The mobile broadband 
device must be inserted in the Tadpole M1500 for the mobile broadband menu to be 
displayed and to enable the device to be configured. 


Turn on the Tadpole M1500. 


Press [Menu-M] to access the main-menu. 
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4. Select Networking and press [Enter]. Then select Mobile Broadband and press [Enter] 
Select Yes and press [Enter]. 


Hetworking 


Figure 71. Networking Menu 


5. Select your region and press [Enter]. 


Select Lacnlity 


Figure 72. Select Locality Menu 


6. Enter your network provider's APN ID if required, or leave blank and press [Enter]. 
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Mabile Broadband Setup ® 


Figure 73. Mobile Broadband Setup Screen (1 of 2) 
7. 


If required, configure to enable the mobile broadband card to prompt for a user name 
and password when connecting to your network. 


Mabile Broadband Setup ® 


Figure 74. Mobile Broadband Setup Screen (2 of 2) 


8. Enter MTU value if appropriate or press [Enter]. 
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Mobile Eroaogdband Setup 


Figure 75. Enter User Name 


9. Press [Enter] to save changes and then press [Enter] again at the OK prompt to confirm 
configuration saved. Then press [Esc] or select Back to Main to return to the main menu. 


—_—SSE 

Summary of Network Access Procedures 
Accessing, navigating, and configuring via the Tadpole M1500 menu system is 
straightforward. The Tadpole M1500 menu system contains a variety of variable parameters 


to enable configuration for a wide range of network configurations and customer driven 
requirements. 


Below is an overview of the steps and menu options required to configure the following 
network options. 


Example 1: Ethernet Connection to DHCP Server 
No configuration required, attach the Ethernet cable. 


Example 2: Wireless Connection to Office Network 


1. Create a profile/edit profile. 

2. Configure wireless device. 

3. Configure Servers/Domain Name Service. 
4. Activate profile. 


Example 3: Wireless Connection over VPN to Office Network 


Create a profile/edit profile. 

Configure wireless device. 

Configure Servers/Domain Name Service. 
Configure VPN. 


Activate profile. 


ae eS 
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Example 4: Mobile Broadband Connection over VPN to Office Network 


Create a profile/edit profile. 

Configure 3G device. 

Configure Servers/Domain Name Service. 
Configure VPN. 


Activate profile. 


Lt ye a 


Example 5: Wireless Connection Using the Mini Browser over VPN to Office Network 


Create a profile/edit profile. 

Configure wireless device. 

Configure Servers/Domain Name Service. 
Configure VPN. 


Enable and initialize the mini browser. 


Se Ww NS 


Activate profile. 


Example 6: Select from the Available Wireless Access Devices 


1. Create a profile name (no further configuration necessary). 


2. Activate profile. 


Provided an Ethernet cable is not attached and the wireless switch is set to the ON position, 
the Tadpole M1500 provides a list of the available wireless access points available for 
selection. 


Configuring VPN 


The Tadpole M1500 VPN client can be configured with devices supporting the following 
IPSEC RFCs. 


e\ NOTE: The Tadpole M1500 VPN client does not support SSL VPNs. 


Summary of Supported Features 
The following is a list of supported features for the Tadpole M1500 VPN client: 


* Standards compliant RFCs for encryption and authentication (RFC 2406), key 
generation and maintenance (RFCs 2407, 2408, 2409, and 4109), dead peer 
detection (RFC 3706), and connection behind NAT devices (RFCs 3947 and 3948). 


+ Internet Protocol Encapsulating Security Payload (IP ESP) encryption and 
authentication algorithms ensure confidentiality and integrity of data. Refer to the 
following IP ESP algorithms: 


Encryption: 3DES, AES 128, AES 192, and AES 256 
Authentication: MD5, SHA-1 and SHA-2 
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NOTE: Null Encryption can be negotiated alongside one of the authentication algorithms to enable ESP 
e) to operate in a mode similar to IP Authentication Header (AH). Encryption and authentication 
keys are provided as dynamic keys negotiated via IKE. 


- Internet Key Exchange (IKE); Identity Protection Mode and Aggressive Mode for 
Phase 1 negotiations, Quick Mode for Phase 2 negotiations. 


¢ Perfect Forward Security (PFS) is provided by a selected Diffie-Hellman group as 
the source of key material. This ensures that data established by Phase 2 keys is not 
affected if Phase 1 keys are compromised. 


¢ Dynamic IP Address Assignment is supported through Mode Config. 


«+ User identification using standard user name/password mechanisms or using RSA 
SecurID authentication. 


e Dead Peer Detection (DPD) support allows a VPN peer to send messages to the 
Tadpole M1500 to detect if a connection is still functioning. 


* Connection behind a Network Address Translation (NAT) device is automatically 
detected by the VPN client, and is supported with NAT-Traversal (NAT-T). 


Preparing for Configuration of VPN 


Before commencing with any configuration, some preparatory work is required. The 
following may be needed: 


+ Tadpole M1500 typically uses DHCP to obtain an IP address and to get IP addresses 
off the Sun Ray Auth and Firmware servers. In VPN configurations, the Sun Ray server 
information is not likely to be available via DHCP. The server addresses can be 
configured in the Servers menu. 


- — Is the Tadpole M1500 likely to be behind a NAT? This is not directly configured but 
some of the configuration options are affected by this. Specifically, the use of Main 
Mode and Identification via IP Address are not supported with a NAT router. 
Aggressive Mode must be configured when behind a NAT. 


- Determine which method of identification is to be used--Key Identifier or Email 
Address-- and gather the relevant ID values. (For example, when connecting to a 
Cisco VPN concentrator, the Key Identifier is the group to which you wish to 
connect.) 


- Determine the pre-shared secret relevant to the identifier previously chosen. 
Currently, pre-shared secret is the only method of authentication that is supported. 


- _ Is the user to be separately verified using XAuth? 


e\ NOTE: XAuth is an extension of Mode Config and is used to further authenticate the user if it is required 
by the VPN peer. 


- — Is Aggressive mode to be used during Phase 1? If so, the encryption algorithm, 
authentication algorithm and PFS (Perfect Forward Security) Group needs to be 
determined. 
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Configuring the VPN 


1. From the main menu, select Security and press [Enter]. 


Main Menu 


Figure 76. Main Menu 


2. Select IPSec and press [Enter]. 


Security Menu 


Figure 77. Security Menu 


3. Select Enable IPSec and press [Enter]. Press [Enter] 
again and then OK. 
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Figure 78. IPSec Screen (1 of 2) 


4. Select Configure IPSec and press [Enter]. 


Figure 79. IPSec Screen (2 of 2) 


5. Select the Phase 1 mode: Easy VPN, Aggressive, or Main. Phase 1 negotiation 
determines how the traffic is protected for negotiation of the ESP Security 
Associations. 
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Select Phase 1 Mode uw 


Figure 80. Select Phase 1 Mode 


For configuring the VPN in Easy Mode, go to Step 6.; for Aggressive Mode, go to 
Step7.; for Main Mode, go to Step 8. 


6. Easy VPNis a simplified set of the parameters required by Aggressive Mode. For Easy 
VPN you are only asked for the following: 


a. Enter the Group Name and press [Enter]. Then enter the identifier used to select the 
pre-shared key in the VPN gateway. 


IPSec Configuration ou 


Figure 81. Enter Group Name 


b. Select User Authorization mode and press [Enter]. 
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: : rm 
User Authorisation 
— 


Figure 82. User Authorization Screen 


c. Should you select Xauth or SecurlD, enter the pre-shared key and press [Enter]. 


IPSec Configuration fl 


Figure 83. IPSec Configuration Screen 


The Tadpole M1500 currently only supports pre-shared keys as the method for 
authentication. The pre-shared key entered here must match that on the VPN 
gateway. The key can be ASCII characters or, by prefixing with Ox, hex digits. This is 
the seed to the creation of the dynamic keys. If this does match the gateway, then 
the Tadpole M1500 fails to connect to the VPN. 


d. Enter the VPN client fixed IP address, or leave blank and press [Enter]. 
If the Tadpole M1500 has been assigned a fixed IP address within the VPN then enter it 
here. Leave the address empty to force the Tadpole M1500 to use Mode Config and 
request an IP address from the VPN gateway. 
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IPSec Configuration ol 


Figure 84. Enter VPN Client IP Address 


e. Enter the VPN Server IP address and press [Enter]. This is the public address of the VPN 
gateway. 


IPSec Configuration A 


Figure 85. Enter VPN Server IP Address 


Go to Step 9. 


7. \In Aggressive Mode, knowledge is required of the configuration of the VPN gateway, 
specifically, which algorithms the gateway is configured to accept. The Tadpole M1500 
sends a single proposal with the given algorithms. Aggressive Mode requires more 
configuration effort but provides more control. 


a. Select the Device ID Type. 
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Select Qewice Id ial 
Type 


Figure 86. Select Device ID Type 


Select one of the five options to determine how the Tadpole M1500 identifies itself 
to the VPN gateway. The identification is typically used as an identifier to select 
the pre-shared key in the VPN gateway. The most commonly used identifiers are IP 
Address and Key Identifier. If the Tadpole M1500 is behind a NAT device, NAT pre- 
cludes the use of IP Address as an identifier. You need to use another option and 
configure your VPN gateway accordingly. 


b. For Key Identifier, enter the Device ID and press [Enter]. Enter the identifier used to 
select the pre-share key in the VPN gateway. 


IPSec Configuration ft 


Figure 87. Enter Device ID 


c. Select the encryption algorithm to match your VPN concentrator. 
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Select Encryption ot 


Figure 88. Select Encryption Algorithm 


d. Select the authentication algorithm to match your VPN concentrator. 


Select rr . 
Authentication == 


Figure 89. Select Authentication Algorithm 


e. Select the DH group appropriate to your VPN gateway configuration and press 
[Enter]. 


The list comprises the Diffie-Hellman groups supported during Phase 1 of the IKE 
negotiation. 
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Select DH Group al 


Figure 90. Select DH Group 
f. Select the PFS group appropriate for your configuration. 


The list comprises the Diffie-Hellman groups available to use to provide Perfect For- 
ward Secrecy between Phase 1 and Phase 2 key generation in IKE. 


Select PFS Group el 


Figure 91. Select PFS Group 


g. Select the User Authorization mode and press [Enter]. 
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: : ir 
User Authorisation 
— 


Figure 92. Select User Authorization 


h. If you select Xauth or SecurlD, enter the pre-shared key and press [Enter]. 


IPSec Configuration el. 


Figure 93. Enter Pre-Shared Key 


The Tadpole M1500 currently only supports pre-shared keys as the method for 
authentication. The pre-shared key entered here must match that on the VPN 
gateway. The key can be ASCII characters or, by prefixing with Ox, hex digits. This is 
the seed to the creation of the dynamic keys. If this does match the gateway, then 
the Tadpole M1500 fails to connect to the VPN. 


i. Enter the VPN client fixed IP address, or leave blank and press [Enter]. 
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IPSec Configuration i 


Figure 94. Enter VPN Client IP Address 


If the Tadpole M1500 has been assigned a fixed IP address within the VPN, then 
enter it here. Leave the address empty to force the Tadpole M1500 to use Mode 
Config and request an IP address from the VPN gateway. 


j. Enter the VPN Server IP address and press [Enter]. 


This is the public address of the VPN gateway. 


IPSec Configuration at 


Figure 95. Enter VPN Server IP Address 


Go to Step 9. 


8. In Main Mode, the Tadpole M1500 sends a selection of security proposals to the VPN 
gateway. The gateway then selects the most appropriate. The set of proposals sent 
includes most permutations of encryption, hash and Diffie-Hellman algorithms 
supported by the Tadpole M1500 Main and Aggressive modes. Select Main Mode and 
Press [Enter] and select Yes. 
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IPSec Configuration et 


Figure 96. Select Main Mode 


a. Enter the Pre-shared key and press [Enter]. 


IPSec Configuration al 


Figure 97. Enter Pre-Shared Key 


The Tadpole M1500 currently only supports pre-shared keys as the method for 
authentication. The pre-shared key entered here must match that on the VPN 
gateway. The key can be ASCII characters or, by prefixing with Ox, hex digits. This is 
the seed to the creation of the dynamic keys. If this does match the gateway, then 
the Tadpole M1500 fails to connect to the VPN. 


b. Enter the VPN client fixed IP address, or leave blank and press [Enter]. 
If the Tadpole M1500 has been assigned a fixed IP address within the VPN, then enter 


it here. Leave the address empty to force the Tadpole M1500 to use Mode Config and 
request an IP address from the VPN gateway. 
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IPSec Configuration i 


Figure 98. Enter VPN Client IP Address 


c. Enter the VPN Server IP address and press [Enter]. This is the public address of the VPN 
gateway. 


IPSec Configuration A 


Figure 99. Enter VPN Server Address 


e\ NOTE: Certain configuration options are inherently incompatible with NAT. 


When the Tadpole M1500 is behind a NAT device, Main Mode fails to negotiate keys. If the 
Tadpole M1500 is behind a NAT or there is any uncertainty select Aggressive Mode. 


NAT precludes the use of IP Address as an identifier. You need to use another option and 
configure your VPN gateway accordingly. 


9. Atthe “Save Changes” menu highlight Yes and press [Enter]. Press [Enter] to confirm 
configuration saved. 


10. Select Back to Security and press [Enter]; then choose Back to Main and press [Enter] 
to exit the security menu and return to the main menu. 
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Security Network Login 


This feature is provided should your network connection require a permanent SSL 
authorization to the network. This is achieved via the embedded mini browser opening the 
URL connection and allowing the user to provide the authentication necessary to establish 
the connection. 


1. To enable, from the Main Menu select Security, then select Network Login. See 
Figure 100. 


Security Menu 


Figure 100. Security Menu 


2. Enter Yes at the Network Login screen to enable and enter the network URL: 
http://IPaddress 
or 
http: /7/www.mysecurenetwork.com 


See Figure 101 and Figure 102. 


Hetwork Login & 


Figure 101. Network Login (1 of 3) 


Tadpole M1500 User Guide Page 74 


Hetwork Login > 


Figure 102. Network Login (2 of 3) 


3. Press [Enter] to enable. See Figure 103. 


Hetwork Login > 


Figure 103. Network Login (3 of 3) 


The mini browser opens and connects to the URL entered. The user must authenticate as the 
site requires. This could be via a login screen, a request to insert a smart card, or some other 
server-dependant startup screen. 


If authentication is required prior to the VPN connection being established, once the 
authorization is complete, continue the connection by pressing the [Enter] key with the OSD 
menu displayed. The browser window disappears from view (it is hidden) and the Tadpole 
M1500 continues to establish the VPN connection. Once the VPN connection and 
authentication processes are complete, the Tadpole M1500 connects to the Sun Ray server. 
Once connected to the server, the user may now be presented with either a login screen, a 
request to insert a smart card, or some other server-dependant startup screen. 


To un-hide/uncover the mini browser, use the key sequence [Menu-Ctrl-H]. Note that the 
mini browser is only able to connect to the original network host established or a server on 
the same local subnet. If the mini browser exits the authorization page, the SSL connection is 
broken and, depending on your network configuration, the connection is likely to fail. 
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SC 

User Interface Control 
The Tadpole M1500 allows you to set the level of user interface control. From the Main Menu 
select Security, then select User Interface Control. 


You can select 3 levels: 


- Full Access: Default; everything on the UI is available to the user. 
+ Profile List: Only the Profiles Tab is available; everything else is not shown. 


* Quiet Mode: The UI and progress indicators do not appear during connection. The 
only time the UI appears (and it will be in the “Hide” format and not expandable) is if 
there is an error, e.g., cable pulled out, connection timeout. 


Configuring the Mini Browser 


The Tadpole M1500 has an embedded browser. One function of the browser is that it can be 
used for a web-redirect from a hotel or public Wi-Fi access point. 


e\ NOTE: The browser does not support plug-ins (e.g., flash, video, Java). 


Enabling the Mini Browser 


1. To enable the mini browser, go to the OSD Main Menu by pressing [Menu-M]. 


2. Using the down arrow key, scroll down to the Advanced Menu and press [Enter]. 


Figure 104. Main Menu 


3. Select Mini Browser from the Advanced Menu and press [Enter]. 
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Advanced Menu 


Figure 105. Advanced Menu 


4. Select Yes and press [Enter]. 


Mini Erowser 


Figure 106. Mini Browser Screen 


5. Press [Esc] to return to the main menu. 


Now configure the mode of connection for the mini browser: Ethernet or wireless. (See 
earlier sections: on page 45 or on page 49.) 
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Configuring a Homepage 


By default the browser's home page is www.tadpole.com. This can be configured to a URL of 
your choice. 


1. From the Main Menu select Advanced, then select Browser homepage. 


Advanced Menu 


Figure 107. Advanced Menu 


2. Enter the desired URL and press [Enter] to save. 


Mini Brawser 
homepage 


ttole -WwWmyhoamepage.cam 


Figure 108. Mini Browser Homepage 
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Using the Mini Browser 


Once the mini browser has been configured, it can be accessed at any time by pressing 
[Menu-B]. See Figure 109. 


e\ NOTE: The browser does not support plug-ins (e.g., flash, video, Java). 


Sy ri haar 
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Figure 109. Mini Browser 


The browser resolves DNS via DHCP. The browser authenticates to the web-redirect service if 
necessary. 


To access the browser menu toolbar press [Esc] and use the arrow keys to navigate the 
menus. To close the browser, select File and Exit. 


To hide the browser from view using a touchpad or mouse, select Hide (located in the top 
left hand corner). To uncover the hidden the browser, use the key sequence [Menu-Ctrl-H]. 


To close the browser, from the menu, select File and Quit or [Menu-Ctrl-B]. 
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System Password 


To set a system password, from the main menu [Menu-M] select the Security menu, then 
select Set Password. 


SeCcWMmity Menu ot 


Figure 110. Set Password 

The system password denies access to the majority of the menu system. Access to the Main 
Menu is allowed upon entry of the system password. Access is available to the following 
Menus via use of the Menu shortcuts. 


Functionality and configuration without provision of the System Password can be accessed 
via the following [Menu] keys: 


[Menu-A] Soft reset of the client firmware. The system power cycles and restarts. 
[Menu-B] Mini browser (providing it has first been enabled). 

[Menu-L] View license information. 

[Menu-P] List configured profiles and enables selection for use. 

[Menu-N] Network information. 

[Esc] Exits the previous menu. 


Should a system password be forgotten or lost contact your nearest Tadpole customer server 
representative for further instructions on how to reset the system password. 
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.parms File 


The . parms file can be used as an alternative method for specifying parameters globally to 
all Tadpole thin clients which connect to the firmware server, or on a per-Tadpole thin client 
basis. 


During initialization, the Tadpole thin client looks for one of two . parms files on the tftp 
(firmware) server which must conform to the following naming convention. 


Tadpole-<Thin Client model name>.MAC.parms 


where MAC is uppercase full 14 hex digit MAC address of the Tadpole thin client as identified 
using [Menu-N], or 


Tadpole-<Thin Client model name>. parms 


An example <Thin Client model name> would be mb03 (Tadpole M1500). 


The Tadpole M1500 attempts to read the . parms file with the MAC address first. Should that 
fail, it attempts to read the other . parms file. 


The contents of the . parms file is a set of key-value pairs, of the format: 


key=valuei[, value2,....,Vvaluen] 


Recognized keys are: 


servers 
select 
config 
profiles 


fwbase 


Any other keys are ignored, processing of the recognized keys is not effected. The keys 
servers and select are compatible with the same options in a Sun Ray . parms file and 
have the same meaning. 


Servers Key 
The servers key supports up to 11 Auth Servers (also called Session Managers) specified in 


a list separated by commas. The server names can either be names to be resolved by DNS, or 
IP addresses. It is permissible for the DNS name to resolve to multiple IP addresses. 
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Select Key 


The select key is used in conjunction with the servers key. It can have two values either 
random or in order. It specifies how the list of Auth Servers are processed. A value of 
inorder tells the Tadpole M1500 to run through the list sequentially until an Auth Server 
responds. random tells the Tadpole M1500 to select an Auth Servers randomly from the 
serves list. 


Config Key 


Takes a single value, identifying the name of a saved configuration to be loaded from the 
firmware server. 


Profiles Key 


Provides a comma separated list of individual profiles saved on the firmware server. These 
are loaded onto the Tadpole M1500 from the firmware server. 


Fwbase Key 


Provides two functions. Provides the URL of the firmware server from which the firmware can 
be downloaded, and, should the URL include the firmware version directory path, it also 
defines the version of the firmware which can be downloaded to the Tadpole M1500, 
providing a barrier level. 


Firmware Management 


Overview 
The Tadpole M1500 firmware can be downloaded via a tftp server or, provided the current 
firmware release is V4.0.0 or greater, via an ftp or an http server. For detailed instructions 
regarding a specific firmware version refer to the release notes. 
The firmware is provided as a package for installation in the following formats * . tar and 
* . rpm, to enable installation on Sun Ray server platform running either Sun Solaris or a Sun 
Ray server supported Linux Operating System. 


The firmware package name comprises the following: 


TAD<tadpole or Tadpole<Thin_Client_model_name>-V<version_number> 


The latest publicly available firmware package releases can be downloaded from our ftp site 
ftp://ftp.tadpole.com. 
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Firmware Management 
TFTP 


By default a Sun Ray server uses a tftp boot server as a mechanism to update firmware to 
thin client devices. By installing the package, the Tadpole M1500 firmware is placed in the / 
opt/TADmeteor/1ib/firmware/ directory and copied into the /tf tpboot directory, 
and depending on the configuration of your Sun Ray Server, allows any Tadpole M1500 of the 
same model name to download the firmware located in /tftpboot. 


Should you wish limit or target a given firmware release onto a specific unit this can be 
achieved by amending the path in which the firmware is installed, in conjunction use of a 
Tadpole M1500 . parms file using the fwbhase option to define the path of the firmware 
applicable to the Tadpole M1500 model type or a specific unit. 


Example: 


All Tadpole M1500s with the exclusion of the Tadpole M1500 unit with MAC address 
001B384C6598 should use firmware V4.0.0. 


Create a default parms file, Tadpole -mb03.parms located in the 
/tftpboot directory with the following entry: 


fwbhase=tftp://192.168.128.1/Tadpole-mb03-4.0.0 


create a second parms file Tadpole -mb03 . 001B384C6598. parms with the entry: 


fwbhase=tftp://192.168.128.1/invaliddirectoryname 


No new firmware is installed on the unit with MAC address 001B384C6598. For further 
options please refer to the release notes provided with the specific firmware release. 


HTTP or FTP 


The tftp protocol has very poor performance over slow or high latency connections. The 
firmware download speed can be improved dramatically by using an alternative protocol 
such as http. To install using an http or ftp server a Tadpole M1500 . parms file must be 
defined. The http or ftp server address must be valid, i.e., configured for use. 


Below is an example showing the use of an http apache web server for firmware download: 
Create a web server on machine 192.168.128.2 that responds to port 8080 and is accessible 
to the thin client devices with a directory called firmware directly under the web pages root 


(htdocs) directory. The URL for the firmware downloads will then be: 


http://192.168.128.2:8080/firmware 


Create a default . parms file, Tadpole -mb03.parms located in the 
/tftpboot directory on the Sun Ray firmware server with the following entry: 
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fwhase=http://192.168.128.2:8080/firmware 


Copy the files from the default location on the firmware server in /opt/TADmeteor/1ib/ 
firmware/Tadpole-mb03-<Firmware Version> to the htdocs/firmware directory 
on the web server. 


Ensure that the web server is enabled. You can use the thin client mini browser to check this. 
[Menu-B] will launch the mini browser. Enter the URL: 


http://192.168.128.2:8080/firmware 


and you should see the files you just copied. 


If you now do [Menu-A] to reset the client, it should load any new firmware using http. 


Lock Configuration 


The Lock Configuration option is under Main Menu > Advanced > Configuration 
Updated. This option allows the Tadpole M1500 to be locked against server updates. The 
unit does not download new firmware of a new profile image. 


This takes precedence of any profile locking method adopted, along with any method 
employed to control the version of the firmware on the unit 


Reset Configuration 


The Reset Configuration option is the last item on the Main Menu. This option removes the 
profile configurations. It does not remove the video, keyboard or touchpad settings. Also, it 
does not change the behavior of the power button or lid switch should these have been 
configured. 


Optional Features 


The Optional Features menu can be selected from the Main Menu. 


Reserved for future enhancements. Features are enabled or disabled by insertion of a 
Tadpole provided key. 
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Notes 
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Appendix and Licenses 


This section contains Sun OSD codes, Tadpole OSD codes, and the 3G compatibility chart. 
This section also provides software license information. 
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Sun OSD Codes 


Sun OSD icon messages and codes are summarized in the following tables. 


Table 11. Icon Messages 


eee [ei | 


1 The Sun Ray unit is starting up and is waiting for Ethernet link. 

11 The server is authenticated by the Sun Ray and the graphic/keyboard network 
connection is encrypted. 

12 The Sun Ray cannot authenticate the server but the graphic/keyboard network 
connection is still being encrypted. 

13 The server is authenticated to the Sun Ray; the network connection between the 
Sun Ray and the server are not encrypted. 

14 The server is not authenticated to the Sun Ray; the graphic/keyboard network 
connection is not encrypted. 

15 The Sun Ray is refusing to talk to the server due to the server's refusal or inability to 
authenticate or encrypt the network connection. 

16 The Sun Ray USB bus is temporarily busy servicing a high-speed device, and the 
keyboard or mouse may not be responsive to user input. 

21 The Sun Ray unit is booting up and is waiting on DHCP IP address and parameter 
assignment. 

22 The Sun Ray unit is booting up and is now waiting for the initial connection to a Sun 
Ray server. 

23 The connection between the Sun Ray and the network is down. Check the network 
drop cable and (if the network drop cable is okay) the network switch. 

24 The Sun Ray has disconnected from the previous server. 

25 The Sun Ray is being redirected to a new server. 

26 The Sun Ray has connected to the server and is waiting for graphics traffic (this is the 
GNC state). 

27 The Sun Ray is broadcasting to locate a Sun Ray server since either it was not 


provided with Sun Ray specific DHCP parameters or all of the specified servers are 
not responding. 


e\ NOTE: Icon numbers 31 through 34 are the network status display brought up by the user pressing all 
three audio keys. 


31 The network link is up, the server is authenticated, and graphics/keyboard network 
connections are not encrypted. 

32 The network link is up, the server is not authenticated, and graphics/keyboard 
network connections are encrypted. 

33 The network link is up, the server is authenticated and graphics/keyboard are 
encrypted. 
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Table 11. Icon Messages (Continued) 


ee 


34 The network link is up, the server is not authenticated and graphics/keyboard are 
not encrypted. 

50 The server is refusing to talk to the Sun Ray due to the Sun Ray's refusal or inability 
to authenticate or encrypt the network connection 


Table 12. DCHP State Codes 


DCHP State | State Meaning 
Code 

A The server is refusing to talk to the Sun Ray due to the Sun Ray's refusal or inability 
to authenticate or encrypt the network connection. 

B DCHP provided IP address, subnet mask, and router, but Sun Ray vendor-specific 
parameters are missing. 

C DHCP provided IP address and Sun Ray vendor-specific parameters, but subnet 
mask and router are missing. 

D DHCP provided all expected parameters. 


Tadpole OSD Codes 
Table 13. Firmware Upgrade OSD Codes 
Code Meaning 
2 Start firmware update. 
3 Check firmware barrier level. 
4 Fetch firmware component. 
5 Fetch/Verify failed. 
6 Write to flash failed. 
7 Installing new firmware. 
8 Backup firmware after verification. 
9 No firmware update available. 
10 Insufficient power for firmware update. 
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Table 14. Network Type OSD Codes 
Code Meaning 
E Ethernet 
M Mobile broadband 
Ww Wireless 
Table 15. VPN OSD Codes 
Code Meaning 
40 VPN has been initialized. 
41 Internet Key Exchange (IKE) phase 1 is complete. 
42 xauth user ID is authenticated. 
43 xauth user ID is not authenticated. 
44 mode config is complete. Tadpole M1500 received dynamic IP and DNS 
information from concentrator. 
45 IKE phase 2 is complete (i-e., VPN is up). 
46 IKE Phase 1 is complete. Negotiated temporary keys to protect main key 
exchange. 
47 IKE Timeout. No response during key exchange. 
48 Dead Peer Detection (DPD) Timeout. Can no longer communicate with the other 
endpoint. 
49 No proposals from concentrator. Mismatched cryptographic algorithms during 
VPN negotiation. 
Table 16. Mobile Broadband OSD Codes 
Code Meaning 
50 3G Data card found and being initialized. 
51 Checking SIM/PIN status. Ensure the 3G card has a valid SIM and that it's not 
locked (UMTS only). 
52 Configure the 3G card for the correct network type (3G preferred, UMTS only). 
53 Registering with cell provider data network. 
54 Setting 3G network Access Point Name (APN). (UMTS only). 
55 Configuring TCP/IP network with IP address. 
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Table 17. Wireless OSD Codes 
Code Meaning 
60 No encryption on wireless. 
61 Starting Wired Equivalence Protocol (WEP) security on wireless connection. 
62 Using WEP with 802.1X key management. 
63 Using Wi-Fi Protected Access (WPA)/Pre Shared Key (PSK). 
64 Using WPA/EAP. 
65 WPA process terminated. 
66 Disconnect wireless connection. 
67 Wireless connected. 
68 Wireless scanning for networks. 
69 Wireless disabled with RF-Kill. 


Table 18. EAP (for Wireless or Wired 802.1X) OSD Codes 


Code Meaning 
70 EAP (802.1X) authentication starting. 
71 EAP (802.1X) type select phase. 
72 EAP succeeded. 
73 EAP failed. 


Table 19. Ethernet 802.1X OSD Codes 
Code Meaning 


80 Start Ethernet with 802.1X authentication. 
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3G Compatibility Chart 


Table 20. Supported 3G Devices 


Provider Vendor and Model 


Merlin V640 
Merlin V740 
Merlin V620 
UM 760 v 
UM175 v 
USB760 v 
GT Ultra Express 

GlobeTrotter Express HSUPA 


Verizon 


GlobeTrotter Express 7.2 
HSDPA 

iCON 225 v 
iCON HSUPA v 
Merlin EX720 

Curitel Pantech PX 500-Sprint 
Mobile Connect 3G/ GPRS 
Mobile Connect 3G Broadband 
Huawei E870 

Huawei E172 v 
K3760 v 
GlobeTrotter Express HSUPA 


AT&T Cingular 


Sprint 


GlobeTrotter Express 7.2 
HSDPA 

GlobeTrotter GT MAX 7.2 
ICON 225 v 
iCON HSUPA v 
K3760 v 
Merlin XU870D 


Vodafone 
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Table 20. Supported 3G Devices (Continued) 


Vendor and Model Card Type 


GlobeTrotter Express HSUPA 


GlobeTrotter Express 7.2 
HSDPA 

GlobeTrotter GT MAX 7.2 
iCON 225 v 
K3760 v 
T-Mobile Merlin EX870 


Orange 


End User License Agreement 


This device contains third party proprietary software (“Software”). In no event will an end 
user/consumer: (a) copy, distribute, modify, disassemble, reverse engineer or create 
derivations of the source code of the Software, or any portion thereof; (b) export the 
Software or any portion thereof in contravention of applicable export laws and regulations; 
(c) violate applicable laws and regulations; and/or (d) makes representations or warranties 
on behalf of the third party software provider. 


Software Licenses 


Some components of the Tadpole M1500 contain code licensed under the Linux Real Mode 
Interface (LMRI dated 1998) and GNU General Public License (GPL_Version 2, dated June 
1991). 


The software included in this product contains copyrighted software that is licensed under 
the GPL. A copy of that license is included in this document on page 94. You may obtain the 
complete Corresponding Source code from us for a period of three years after our last 
shipment of this product, which is be no earlier than 2011-08-01, by sending a money order 
or check for $10 to: 


GPL Compliance Department 

General Dynamics Itronix Corporation 

20450 Stevens Creek Blvd., Suite 300 

Cupertino, CA 95014, USA 

Please write “source for Tadpole M1500” in the memo line of your payment. 


This offer is valid to anyone in receipt of this information. 
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Linux Real Mode Interface License 
Copyright (C) 1998 by Josh Vanderhoof 


A library of DPMI-like functions for Linux 


Permission is hereby granted, free of charge, to any person obtaining a 

copy of this software and associated documentation files (the “Software”), to 
deal in the Software without restriction, including without limitation the 
rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 
copies of the Software, and to permit persons to whom the Software is 
furnished to do so, subject to the following conditions: 


THE SOFTWARE IS PROVIDED “AS IS’, WITHOUT WARRANTY OF ANY KIND, 

EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. 
IN NO EVENT SHALL JOSH VANDERHOOF BE LIABLE FOR ANY CLAIM, DAMAGES 

OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR 
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE 

OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. 
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GNU GENERAL PUBLIC LICENSE 
Version 2, June 1991 
Copyright (C) 1989, 1991 Free Software Foundation, Inc., 
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA 
Preamble 


The licenses for most software are designed to take away your freedom to share and change 
it. By contrast, the GNU General Public License is intended to guarantee your freedom to 
share and change free software--to make sure the software is free for all its users. This 
General Public License applies to most of the Free Software Foundation's software and to 
any other program whose authors commit to using it. (some other Free Software 
Foundation's software is covered by the GNU Lesser General Public License instead.) You can 
apply it to your programs, too. When we speak of free software, we are referring to freedom, 
not price. Our General Public Licenses are designed to make sure that you have the freedom 
to distribute copies of free software (and charge for this service if you wish), that you receive 
source code or can get it if you want it, that you can change the software of use pieces of it in 
now free programs; and that you know you can do these things. 


To protect your rights, we need to make restrictions that forbid anyone to deny you these 
rights or to ask you to surrender the rights. These restrictions translate to certain 
responsibilities for you if you distribute copies of the software, or if you modify it. For 
example, if you distribute copies of such a program, whether gratis or for a fee, you must give 
the recipients all the rights that you have. You must make sure that they, too, receive or can 
get the source code. And you must show them these terms so they know their rights. We 
protect your rights with two steps: (1) copyright the software, and (2) offer you this license 
which gives you the legal permission to copy, distribute and/or modify the software. Also, for 
each author's protection and ours, we want to make certain that everyone understands that 
there is no warranty for this free software. If the software is modified by someone else and 
passed on, we want its recipients to know that what they have is not the original, so that any 
problems introduced by others will not reflect on the original authors’ reputations. Finally, 
any free program in threatened constantly by software patents. We wish to avoid the danger 
that redistributes of a free program will individually obtain patent licenses, in effect making 
the program proprietary. To prevent this, we have made it clear that any patent must be 
licensed for everyone's free use or not licensed at all. 


The precise terms and conditions for copying, distribution and modification follow. 
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GNU GENERAL PUBLIC LICENSE - TERMS AND CONDITIONS 
FOR COPYING, DISTRIBUTION AND MODIFICATION 


0. This License applies to any program or other work which contains a notice placed by the 
copyright holder saying it may be distributed under the terms of this General Public License. 
The “Program’, below, refers to any such program or work, and a “work based on the 
Program” means wither the Program or any derivative work under copyright law: that is to 
say, a work containing the Program or a portion of it, either verbatim or with modifications 
and/or translated into another language. (Hereinafter, translation is included without 
limitation in the term “modification”) Each licensee is addressed as “you”. Activities other 
than copying, distribution and modification are not covered by this License; they are outside 
its scope. The act of running the Program is not restricted, and the output from the Program 
is covered only if its contents constitute a work based on the Program (independent of 
having been made by running the Program). Whether that is true depends on what the 
program does. 


1. You may copy and distribute verbatim copies of the Program's source code as you receive 
it, in any medium, provided that you conspicuously and appropriately publish on each copy 
an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that 
refer to this License and to the absence of any warranty; and give any other recipients of the 
Program a copy of this License along with the program. 


You may charge a fee for the physical act of transferring a copy, and you may at your options 
offer warranty protection in exchange for a fee. 


2. You may modify your copy or copies of the Program or any portion of it, thus forming a 
work based on the Program, and copy and distribute such modifications or work under the 
terms of Section 1 above, provided that you also meet all of these conditions: 


A) You must cause the modified files to carry prominent notices stating that you 
changed the files and the date of any change. 


B) You must cause any work that you distribute or publish, that in whole or in part 
contains or is derived from the Program or any part thereof, to be licensed as a whole at 
no charge to all third-parties under the terms of this License. 


C) If the modified program normally reads commands interactively when run, you must 
cause it, when started running for such interactive use in the most ordinary way, to print 
or display an announcement including an appropriate copyright notice and a notice that 
there is no warranty (or else, saying that you provide a warranty) and that users may 
redistribute the program under these conditions, and telling the user now to view a copy 
of this License. (Exception: if the program itself is interactive but does not normally print 
such an announcement, your work based on the Program is not required to print an 
announcement.) 


These requirements apply to the modified work as a whole. If identifiable sections of that 
work are not derived from the Program, and can be reasonably considered independent and 
separate works in themselves, then this License, and its terms, do not apply to those sections 
when you distribute them as separate works. But when you distribute the same sections as 
part of a whole which is a work based on the Program, the distribution of the whole must be 
on the terms of this License, whose permissions for other licensees extend to the entire 
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whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of 
this section to claim rights or contest your rights to work written entirely by you; rather, the 
intent is to exercise the right to control the distribution of derivative or collective works 
based on the Program. 


In addition, mere aggregation of another work not based on the Program with the Program 
(or with a work based on the Program) on a volume of a storage or distribution medium does 
not bring the other work under the scope of this License. 


3. You may copy and distribute the Program (or a work based on it, under Section 2) in object 
code or executable form under the terms of Sections 1 and 2 above provided that you also 
do one of the following: 


A) Accompany it with the complete corresponding machine-readable source code, 
which must be distributed under the terms of Sections 1 and 2 above on a medium 
customarily used for software interchange; or, 


B) Accompany it with a written offer, valid for at least three years, to give any third party, 
for a charge no more than your cost of physically performing the source distribution, a 
complete machine-readable copy of the corresponding source code, to be distributed 
under the terms of Sections 1 and 2 above on a medium customarily used for software 
interchange; or, 


C) Accompany it with the information you received as to the offer to distribute 
corresponding source code. (This alternative is allowed only for noncommercial 
distribution and only if you received the program in object code or executable form with 
such an offer, in accord with Subsection b above.) 


The source code for a work means the preferred form of the work for making modifications 
to it. For an executable work, complete source code means all the source code for all 
modules it contains, plus any associated interface definition files, plus the scripts used to 
control compilation and installation of the executable. However, as a special exception, the 
source code distributed need not include anything that is normally distributed (in either 
source or binary form) with the major components (compiler, kernel, and so on) of the 
operating system on which the executable runs, unless that component itself accompanies 
the executable. 


If distribution of executable or object code is made by offering access to copy froma 
designated place, then offering equivalent access to copy the source code from the same 
place counts as distribution of the source code, even though third parties are not compelled 
to copy the source along with the object code. 


4. You may not copy, modify, sublicense, or distribute the Program except as expressively 
provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute 
the Program is void, and will automatically terminate your rights under this License. 
However, parties who have received copies, or rights, from you under this License will not 
have their licenses terminated so long as such parties remain in full compliance. 
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5. You are not required to accept this License, since you have not signed it. However, nothing 
else grants you permission to modify or distribute the Program or its derivative works. These 
actions are prohibited by law if you do not accept this License. Therefore, by modifying or 
distributing the Program (or any work based on the Program), you indicate your acceptance 
of this License to do so, and all its terms and conditions for copying, distributing or 
modifying the Program or works based on it. 


6. Each time you redistribute the Program (or any work based on the Program), the recipient 
automatically receives a license from the original licensor to copy, distribute or modify the 
Program subject to these terms and conditions. You may not impose any further restrictions 
on the recipients’ exercise of the rights granted herein. You are not responsible for enforcing 
compliance by third parties to this License. 


7. If, as a consequence of a court judgment or allegation of patent infringement or for any 
other resonant limited to patent issues), conditions are imposed on you (whether by court 
order, agreement or otherwise) that contradict the conditions of this License, they do not 
excuse you from the conditions of this License. If you cannot distribute so as to satisfy 
simultaneously your obligations under this License and any other pertinent obligations, 
then as a consequence you may not distribute the Program at all. For example, if a patent 
license would not permit royalty-free redistribution of the Program by all those who receive 
copies directly or indirectly through you, then the only way you could satisfy both it and this 
License would be to refrain entirely from distribution of the Program. 


If any portion of this section is held invalid or unenforceable under any particular 
circumstance, the balance of the section is intended to apply and the section as a whole is 
intended to apply in other circumstances. 


It is not the purpose of this section to induce you to infringe any patents or other property 
right claims or to contest validity of any such claims; this section had the sole purpose of 
protecting the integrity of the free software distribution system, which is implemented by 
public license practices. Many people have made generous contributions to the wide range 
of software distributed through that system in reliance on consistent application of that 
system; it is up to the author/donor to decide if he or she is willing to distribute software 
through any other system and a licensee cannot impose that choice. 


This section is intended to make thoroughly clear what is believed to be a consequence of 
the rest of this License. 


8. If the distribution and/or use of the Program is restricted in certain countries either by 
patents or by copyrighted interfaces, the original copyright holder who places the Program 
under this License may add an explicit geographical distribution limitation excluding those 
countries, so that distribution is permitted only in or among countries not thus excluded. In 
such case, this License incorporates the limitation as if written in the body of this License. 


9. The Free Software Foundation may publish revised and/or new versions of the General 


Public License from time to time. Such new versions will be similar in spirit to the present 
version, but may differ in detail to address new problems or concerns. 
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Each version is given a distinguishing version number. If the Program specifies a version 
number on this License which applies to it and “any later version’, you have the option of 
following the terms and conditions either of that version or of any later version published by 
the Free Software Foundation. If the Program does not specify a version number of this 
License, you may choose any version ever published by the Free Software Foundation. 


10. If you wish to incorporate parts of the Program into other free programs whose 
distribution conditions are different, write to the author to ask for permission. For software 
which is copyrighted by the Free Software Foundation, write to the Free Software 
Foundation; we sometimes make exceptions for this. Our decision will be guided by the two 
goals of preserving the free status of all derivatives of our free software and of promoting the 
sharing and reuse of software generally. 


NO WARRANTY 


11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR 
THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE 
STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE 
PROGRAM “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, 
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND 
FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND 
PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, 
YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 


12. INNO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL 
ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE 
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY 
GENERAL, SPECIAL, INCIDENTAL OR DAMAGES ARISING OUT OF THE USE OR INABILITY TO 
USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING 
RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF 
THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR 
OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 


TIFF Library License 


Copyright (c) 1988-1997 Sam Leffler 
Copyright (c) 1991-1997 Silicon Graphics, Inc. 


Permission to use, copy, modify, distribute, and sell this software and its documentation for any purpose is hereby 
granted without fee, provided that (i) the above copyright notices and this permission notice appear in all copies 
of the software and related documentation, and (ii) the names of Sam Leffler and Silicon Graphics may not be 
used in any advertising or publicity relating to the software without the specific, prior written permission of Sam 
Leffler and Silicon Graphics. 


THE SOFTWARE IS PROVIDED “AS IS” AND WITHOUT WARRANTY OF ANY KIND, EXPRESS, IMPLIED OR OTHERWISE, 


INCLUDING WITHOUT LIMITATION, ANY WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR 
PURPOSE. 
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IN NO EVENT SHALL SAM LEFFLER OR SILICON GRAPHICS BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT OR 
CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, 
DATA OR PROFITS, WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE,AND ON ANY THEORY OF 
LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 
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